CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SonicOS SSLVPN SAML Authentication Bypass and MFA Circumvention (CVE-2026-19868)
[Affected Scope] SonicWall firewall appliances running SonicOS 7.x and 6.5.x with SSLVPN service enabled.
[Impact] Attackers with valid credentials for alternate authentication methods can bypass SAML controls and enforced MFA to gain unauthorized network access.
[Mitigation] Immediately apply the latest firmware updates provided by SonicWall and audit SSLVPN access logs for suspicious activity.
SonicWall SMA1000 Appliance Management Console (AMC) OS Command Injection and RCE Vulnerability (CVE-2026-83549) Advisory
[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) management interface
[Impact] A remote authenticated attacker with administrator privileges can execute arbitrary OS commands under specific conditions, leading to complete system compromise
[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict access to the AMC management interface
SonicWall SMA1000 Work Place Pre-Authentication Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-83548)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface
SonicWall SMA1000 Appliance Management Console (AMC) Remote Code Execution and OS Command Injection (CVE-2026-15410)
[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)
[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands under specific conditions, potentially leading to full system compromise
[Mitigation] Immediately apply the latest firmware patches provided by SonicWall and restrict external access to the management console
SonicWall SMA1000 Work Place Unauthenticated Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-15409)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE
[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface
SonicWall SMA1000 Appliance Management Console (AMC) Local Privilege Escalation Vulnerability (CVE-2025-40602) Security Advisory
[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)
[Impact] High-privileged attackers can exploit insufficient authorization to escalate privileges to root, leading to complete system compromise
[Mitigation] Apply the official security patches immediately and restrict network access to the management console
SonicWall SMA1000 AMC and CMC Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2025-23006) Security Advisory
[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)
[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system
[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles
SonicWall SSLVPN Authentication Bypass and Remote Code Execution Vulnerability (CVE-2024-53704) Urgent Security Advisory
[Affected Scope] SonicWall SMA (Secure Mobile Access) appliances and firmware utilizing the SSLVPN authentication mechanism
[Impact] Remote unauthenticated attackers can completely bypass authentication, gain administrative access, and compromise the internal network
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the SSLVPN interface
SonicWall SonicOS Management Access Improper Access Control Vulnerability (CVE-2024-40766) Analysis and Mitigation Guide
[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions
[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)
[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall
SonicWall SMA100 SSL-VPN Management Interface Remote Command Injection Vulnerability (CVE-2023-44221) Analysis and Mitigation Guide
[Affected Scope] SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) running firmware versions 10.2.1.11-63sv and below.
[Impact] A remote authenticated attacker with administrative privileges can inject arbitrary OS commands via the management interface, executing them with 'nobody' user privileges.
[Mitigation] Immediately upgrade the SMA100 firmware to the patched version (10.2.1.12-65sv or higher) and restrict access to the management interface.
SonicWall SMA 100 Management Interface Remote Command Injection Vulnerability (CVE-2021-20035) Analysis and Mitigation Guide
[Affected Scope] SonicWall SMA 100 series firmware versions 10.2.1.1-29sv and earlier, 10.2.0.8-37sv and earlier, and 9.0.0.11-31sv and earlier
[Impact] A remote authenticated attacker can inject arbitrary commands via the management interface, executing code as the 'nobody' user and potentially causing a Denial of Service (DoS)
[Mitigation] Immediately upgrade the SMA 100 firmware to the latest patched versions (e.g., 10.2.1.2-34sv or higher) as recommended by the vendor