Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.EPSS 0.3%Feb 24, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)KEVFeb 5, 2026
- UnknownSonicWall SonicOS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)KEVFeb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVFeb 5, 2026
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityKEVEPSS 2.8%Dec 17, 2025
- UnknownSonicWall sma_200_firmware Improper AuthenticationKEVOct 23, 2025
- UnknownSonicWall sma_200_firmware Heap-based Buffer OverflowKEVOct 23, 2025
- UnknownSonicWall sma_210_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVOct 23, 2025
- UnknownSonicWall analytics Authentication Bypass by Primary WeaknessKEVOct 17, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.EPSS 36.0%May 14, 2025
- High7.1A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the aEPSS 2224.0%May 7, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesKEVEPSS 645.0%May 7, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remoteEPSS 34.0%Apr 30, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferenceKEVEPSS 83.0%Apr 23, 2025
- Medium6.1A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading tEPSS 35.0%Apr 16, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityKEVEPSS 23.4%Jan 22, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityKEVEPSS 95.3%Jan 9, 2025
- UnknownSonicWall scrutinizer Improper AuthenticationKEVOct 1, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVSep 12, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowKEVSep 12, 2024