sonicwall
Safeguard articles tagged "sonicwall" — guides, analysis, and best practices for software supply chain and application security.
25 articles
CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2021-20035 affects SonicWall SMA100 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-04-16.
CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2023-44221 affects SonicWall SMA100 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-05-01.
CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability
CVE-2025-40602 affects SonicWall SMA1000 appliance and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-12-17.
CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability
CVE-2026-15410 affects SonicWall SMA1000 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-14.
CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-15409 affects SonicWall SMA1000 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-14.
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
CVE-2026-83549 affects SonicWall SMA1000 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-02.
CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-83548 affects SonicWall SMA1000 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-02.
When the Perimeter Device Is the Vulnerability: Juniper and SonicWall Confirmed Exploited
A decade-old Juniper ScreenOS backdoor-style auth bypass and a current SonicWall SMA1000 authorization gap both let attackers seize control of the appliance meant to enforce access control.
Four SonicWall SMA1000 CVEs, Two Confirmed for Ransomware, Ten Weeks Apart
SonicWall's SMA1000 VPN appliance had four vulnerabilities confirmed exploited in 2026, two of them flagged by CISA for confirmed ransomware use. The same two bug classes, in the same two interfaces, twice.
SonicWall SonicOS Scanning Surge in May 2026: The CVE-2026-0400 Early-Warning Pattern
GreyNoise recorded ~597,000 SonicWall SonicOS scanning sessions on May 12, 2026, roughly 46x baseline. The pattern echoes the recon waves that preceded CVE-2026-0400's disclosure. Here is how to read the signal.
SonicWall SMA 1000 Zero-Day: CVE-2025-23006 Pre-Auth RCE
SonicWall disclosed CVE-2025-23006, a critical deserialization vulnerability in its SMA 1000 series gateways that was actively exploited as a zero-day before patches were available.
SonicWall SSL VPN CVE-2024-40766: Ransomware's Favorite Front Door
CVE-2024-40766 in SonicWall SonicOS became an immediate target for Akira and Fog ransomware groups, highlighting the ongoing risk of VPN appliance vulnerabilities.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.