VENDOR

SonicWall vulnerabilities: CVEs, exploitation and patches

Every SonicWall CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

  1. CVE-2026-83549
    SMA1000 Appliances OS command injection requiring admin credentials SonicWall SMA1000 Appliances ·
    • CISA KEV
    • EXPLOITED
    HIGH 7.8
  2. CVE-2026-15409
    SonicWall SMA1000 SSRF allows unauthenticated request forging SonicWall SMA1000 Appliances ·
    • CISA KEV
    • EXPLOITED
    • PoC PUBLIC
    CRITICAL 10
  3. CVE-2026-15410
    SMA1000 Appliances post-auth code injection allows OS command execution SonicWall SMA1000 Appliances ·
    • CISA KEV
    • EXPLOITED
    • PoC PUBLIC
    HIGH 7.2
  4. CVE-2026-83548
    SMA1000 Appliances pre-auth server-side request forgery (SSRF) SonicWall SMA1000 Appliances ·
    • CISA KEV
    • EXPLOITED
    • PoC PUBLIC
    CRITICAL 10
4 CVEs · page 1 of 1