SonicWall PSIRT advisories for SonicOS firewalls, SMA/SSL VPN appliances, and Capture Client.
43 changes, newest first
HighVulnerability
SonicWall SonicOS Affected By Multiple Vulnerabilities
SNWLID-2026-0014 · CVE-2026-77708, CVE-2026-77709 +5 · CVSS 8.8 · Impact: High — A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations. A session validation vulnerability has been identified in the SonicOS management interface, which in specific…
SNWLID-2026-0019 · CVE-2026-109593, CVE-2026-109594 · CVSS 9.1 · Impact: Critical — An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information. Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the…
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
SNWLID-2026-0018 · CVE-2026-96540, CVE-2026-100232 · CVSS 8.8 · Impact: High — An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users…
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
SNWLID-2026-0017 · CVE-2026-102255, CVE-2026-102256 +2 · CVSS 10.0 · Vendor rating: Critical — A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality…
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
SNWLID-2026-0015 · CVE-2026-78327, CVE-2026-78328 +1 · CVSS 9.1 · Vendor rating: Critical — An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in…
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
SNWLID-2026-0016 · CVE-2026-83548, CVE-2026-83549 · CVSS 10.0 · Impact: Critical — A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.. Post-authentication…
SonicWall NetExtender Linux Client Multiple Vulnerabilities
SNWLID-2026-0013 · CVE-2026-66152, CVE-2026-66153 · CVSS 8.8 · Impact: High — A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths. There is no evidence that these…
SonicWall Email Security Affected By Multiple Vulnerabilities
SNWLID-2026-0012 · CVE-2026-66149, CVE-2026-66150 · CVSS 7.8 · Impact: High — Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask. Improper Control of Generation of Code ('Code Injection')…
SonicWall Global VPN Client (GVC) Out-of-bounds kernel memory read vulnerability
SNWLID-2026-0010 · CVE-2026-66151 · CVSS 5.5 · Impact: Medium — SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
