MSRXSonicWall vulnerabilities being exploited
5 SonicWall flaws were confirmed exploited in the wild in the past 365 days, 2 used in ransomware, across 2 products: SMA1000 Appliances, SMA1000 appliance. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-09-02 | CVE-2026-83549 SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. | 2026-09-05 |
| 2026-09-02 | CVE-2026-83548 SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations. | 2026-09-05 |
| 2026-07-14 | CVE-2026-15410 SMA1000 Appliances ransomwareSonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. | 2026-07-17 |
| 2026-07-14 | CVE-2026-15409 SMA1000 Appliances ransomwareSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. | 2026-07-17 |
| 2025-12-17 | CVE-2025-40602 SMA1000 appliance SonicWall SMA1000 Missing Authorization Vulnerability SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices. | 2025-12-24 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.