Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Firewalls and NGFW · in CISA KEV

SonicWall in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 20 entries for SonicWall as of catalog version 2026.11.06, released November 6, 2026. The newest was added November 6, 2026, and the latest federal due date is November 20, 2026. CISA marks 13 of them as known ransomware use.

Updated

entries in the catalog
20
newest addition
November 6, 2026
latest federal due date
November 20, 2026
marked known ransomware use
13

Directory record

Website
www.sonicwall.com
Categories
Firewalls and NGFW (primary), SASE and SSE, EDR and XDR, MDR and managed SOC
Headquarters
HQ not established
Founded
Not established
Ownership
Owned by Francisco Partners and Elliott Management since 2016
Company record
SonicWall on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “SonicWall”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added November 6, 2026

    CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

    SonicOS SSLVPN · on must-patch

    Due November 20, 2026

  2. Added September 2, 2026

    CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability

    SMA1000 Appliances

    Due September 5, 2026

  3. Added September 2, 2026

    CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    SMA1000 Appliances

    Due September 5, 2026

  4. Added July 14, 2026

    CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability

    SMA1000 Appliances · known ransomware use

    Due July 17, 2026

  5. Added July 14, 2026

    CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    SMA1000 Appliances · known ransomware use

    Due July 17, 2026

  6. Added December 17, 2025

    CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability

    SMA1000 appliance

    Due December 24, 2025

  7. Added May 1, 2025

    CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability

    SMA100 Appliances

    Due May 22, 2025

  8. Added April 16, 2025

    CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability

    SMA100 Appliances

    Due May 7, 2025

  9. Added February 18, 2025

    CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

    SonicOS · known ransomware use

    Due March 11, 2025

  10. Added January 24, 2025

    CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability

    SMA1000 Appliances · known ransomware use

    Due February 14, 2025

  11. Added September 9, 2024

    CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability

    SonicOS · known ransomware use

    Due September 30, 2024

  12. Added March 28, 2022

    CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

    Secure Remote Access (SRA) · known ransomware use

    Due April 18, 2022

  13. Added March 28, 2022

    CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability

    SMA100

    Due April 18, 2022

  14. Added March 15, 2022

    CVE-2020-5135 SonicWall SonicOS Buffer Overflow Vulnerability

    SonicOS · known ransomware use

    Due April 5, 2022

  15. Added January 28, 2022

    CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

    SMA 100 Appliances · known ransomware use

    Due February 11, 2022

  16. Added November 3, 2021

    CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability

    SonicWall Email Security · known ransomware use

    Due November 17, 2021

  17. Added November 3, 2021

    CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability

    SonicWall Email Security · known ransomware use

    Due November 17, 2021

  18. Added November 3, 2021

    CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability

    SonicWall Email Security · known ransomware use

    Due November 17, 2021

  19. Added November 3, 2021

    CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability

    SSLVPN SMA100 · known ransomware use

    Due November 17, 2021

  20. Added November 3, 2021

    CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability

    SMA100 · known ransomware use

    Due May 3, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · November 8, 2026

    CISA Adds Actively Exploited SonicWall SSLVPN Flaw to KEV Catalog

  2. Daily briefing · November 7, 2026

    CISA Adds Actively Exploited SonicWall SSLVPN Flaw to KEV

  3. Daily briefing · October 13, 2026

    SonicWall patches pre-auth SSRF flaw letting attackers reach internal appliance functions

  4. Daily briefing · October 10, 2026

    SonicWall patches pre-auth SSRF flaw in SMA 1000 VPN appliances

  5. Daily briefing · October 9, 2026

    SonicWall patches critical pre-auth SSRF flaw in SMA 1000 appliances

  6. Weekly archive · Aug 31 – Sep 6, 2026

    SonicWall Confirms Active Exploitation of SMA 1000 Zero-Days

  7. Weekly archive · Jul 13 – Jul 19, 2026

    SonicWall patches SMA 1000 zero-days under active attack

  8. Weekly archive · Dec 15 – Dec 21, 2025

    CISA Adds Cisco, SonicWall, and ASUS Flaws to Exploited Vulnerabilities Catalog

  9. Weekly archive · Nov 3 – Nov 9, 2025

    Mandiant Ties SonicWall Cloud Backup Breach to State-Sponsored Actor

  10. Weekly archive · Sep 29 – Oct 5, 2025

    Akira Ransomware Hit SonicWall VPN Victims in Under Four Hours

  11. Weekly archive · Sep 22 – Sep 28, 2025

    SonicWall Discloses MySonicWall Cloud Backup Incident

  12. Weekly archive · Sep 15 – Sep 21, 2025

    SonicWall Discloses Brute-Force Breach of Firewall Backup Files

  13. Weekly archive · Sep 8 – Sep 14, 2025

    Akira affiliates chain an old SonicWall bug with two configuration gaps

  14. Weekly archive · Jul 21 – Jul 27, 2025

    SonicWall Patches Critical SMA Appliance Flaw, Urges Compromise Checks

  15. Weekly archive · Jul 14 – Jul 20, 2025

    Persistent OVERSTEP backdoor found on end-of-life SonicWall SMA appliances

  16. Weekly archive · Jun 23 – Jun 29, 2025

    SonicWall Warns of Trojanized NetExtender VPN Installer Stealing Credentials

  17. Weekly archive · May 5 – May 11, 2025

    SonicWall SMA100 flaws chain to root, and one may be exploited

  18. Weekly archive · Apr 28 – May 4, 2025

    Apache HTTP Server and SonicWall Flaws Added to KEV List

  19. Weekly archive · Feb 17 – Feb 23, 2025

    CISA Adds Palo Alto and SonicWall Flaws to Known Exploited Vulnerabilities Catalog

  20. Weekly archive · Jan 27 – Feb 2, 2025

    Thousands of SonicWall Firewalls Remain Exposed to Exploitable Flaw

  21. Weekly archive · Jan 20 – Jan 26, 2025

    CISA Adds SonicWall SMA1000 Flaw to KEV Catalog

  22. Weekly archive · Nov 25 – Dec 1, 2024

    Researchers Disclose RCE Flaws in Palo Alto and SonicWall VPN Clients

  23. Weekly archive · Sep 9 – Sep 15, 2024

    CISA adds exploited SonicWall SonicOS flaw to KEV catalog

  24. Weekly archive · Aug 26 – Sep 1, 2024

    SonicWall fixes a critical access control flaw in its firewalls

  25. Weekly archive · Jan 1 – Jan 7, 2024

    SonicWall Acquires Banyan Security to Expand Zero Trust and SSE Offerings

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for SonicWall, published November 8, 2026