https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-32821.htmlhttps://patchthecve.com/cve/CVE-2025-32821.htmlWed, 17 Jun 2026 09:12:37 +0000HIGH 7.2: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.https://patchthecve.com/cve/CVE-2025-32820.htmlhttps://patchthecve.com/cve/CVE-2025-32820.htmlWed, 17 Jun 2026 09:12:37 +0000HIGH 8.8: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.https://patchthecve.com/cve/CVE-2025-32819.htmlhttps://patchthecve.com/cve/CVE-2025-32819.htmlWed, 17 Jun 2026 09:12:37 +0000HIGH 8.8: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.https://patchthecve.com/cve/CVE-2024-53703.htmlhttps://patchthecve.com/cve/CVE-2024-53703.htmlWed, 17 Jun 2026 08:09:08 +0000HIGH 8.1: A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.https://patchthecve.com/cve/CVE-2024-53702.htmlhttps://patchthecve.com/cve/CVE-2024-53702.htmlWed, 17 Jun 2026 08:09:07 +0000MEDIUM 5.3: Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.https://patchthecve.com/cve/CVE-2024-45319.htmlhttps://patchthecve.com/cve/CVE-2024-45319.htmlWed, 17 Jun 2026 07:54:01 +0000MEDIUM 6.3: A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.https://patchthecve.com/cve/CVE-2024-45318.htmlhttps://patchthecve.com/cve/CVE-2024-45318.htmlWed, 17 Jun 2026 07:54:01 +0000HIGH 8.1: A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.https://patchthecve.com/cve/CVE-2024-40763.htmlhttps://patchthecve.com/cve/CVE-2024-40763.htmlWed, 17 Jun 2026 07:46:29 +0000HIGH 7.5: Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution.https://patchthecve.com/cve/CVE-2024-38475.htmlhttps://patchthecve.com/cve/CVE-2024-38475.htmlWed, 17 Jun 2026 07:40:21 +0000CRITICAL 9.1: Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. S