Vendor History
SonicWall security incident history
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found 19 actively exploited security flaws for SonicWall, dated Nov 3, 2021 to Sep 2, 2026. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.
Breach notices and SEC cyber filings
None found in the sources we check.
Got a breach letter from SonicWall? What to do when a vendor has a data breach.
Actively exploited security flaws
Flaws in SonicWall products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.
-
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-83548). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CVE-2026-83549). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-15409). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA1000 Appliances Code Injection Vulnerability (CVE-2026-15410). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA1000 Missing Authorization Vulnerability (CVE-2025-40602). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall SMA100 Appliances OS Command Injection Vulnerability (CVE-2023-44221). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall SMA100 Appliances OS Command Injection Vulnerability (CVE-2021-20035). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability (CVE-2024-53704). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA1000 Appliances Deserialization Vulnerability (CVE-2025-23006). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SonicOS Improper Access Control Vulnerability (CVE-2024-40766). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA100 Directory Traversal Vulnerability (CVE-2019-7483). Added to CISA's list of security flaws known to be exploited by attackers.
-
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability (CVE-2021-20028). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SonicOS Buffer Overflow Vulnerability (CVE-2020-5135). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability (CVE-2021-20038). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SMA100 SQL Injection Vulnerability (CVE-2019-7481). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall SSLVPN SMA100 SQL Injection Vulnerability (CVE-2021-20016). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall Email Security Improper Privilege Management Vulnerability (CVE-2021-20021). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall Email Security Unrestricted Upload of File Vulnerability (CVE-2021-20022). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
-
SonicWall Email Security Path Traversal Vulnerability (CVE-2021-20023). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works
To cite: Vendor History, "SonicWall security incident history," vendorhistory.com/vendor/sonicwall, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.