SonicWall vulnerabilities and fixes

CVEs that mention SonicWall, ranked by priority. 5 tracked.

SonicWall has 5 tracked vulnerabilities, 1 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 4. Most recent: 2026-09-01. Highest priority: CVE-2026-83548 (score 97/100).

• CVE-2026-83548 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
• CVE-2026-83549 HIGH 7.8 EXPLOITED UPGRADE UPGRADE SonicWall SMA1000 Appliances OS Command Injection Vulnerability
• CVE-2026-66149 HIGH 7.8 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security applia
• CVE-2026-66150 HIGH 7.8 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security applia
• CVE-2026-66151 MEDIUM 5.5 SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory re

FAQ

How do I fix SonicWall vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is SonicWall being exploited right now?

Yes: 2 SonicWall CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which SonicWall CVE should I patch first?

CVE-2026-83548 currently ranks highest (97/100): SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability.

← Back to latest CVEs