216
CVEs
52
Critical
92
High
19
KEV
47
PoC
139
Unpatched C/H
4.2%
Patch Rate
13.1%
Avg EPSS
Severity Breakdown
CRITICAL
52
HIGH
92
MEDIUM
69
LOW
3
Monthly CVE Trend
Affected Products (30)
Sonicos
65
Global Management System
29
Sma 210 Firmware
29
Sma 410 Firmware
29
Sma 500V Firmware
26
Sma 200 Firmware
26
Sma 400 Firmware
26
Sonicosv
18
Analytics
17
Email Security
13
Sma 100 Firmware
12
Windriver
10
Garrettcom Magnum Dx940E Firmware
9
Ruggedcom Win7000 Firmware
9
Ruggedcom Win7200 Firmware
9
Ruggedcom Win7025 Firmware
9
E Series Santricity Os Controller
9
Hirschmann Hios
9
Siprotec 5 Firmware
9
Ruggedcom Win7018 Firmware
9
Vxworks
9
Analyzer
8
Power Meter 9810 Firmware
7
Power Meter 9410 Firmware
7
Scrutinizer
7
Netextender
7
Debian Linux
6
Email Security Appliance 9000 Firmware
5
Email Security Appliance 5000 Firmware
5
Email Security Appliance 5050 Firmware
5
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2021-44228 | Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history. | CRITICAL | 10.0 | 94.4% | 239 |
KEV
PoC
|
| CVE-2024-53704 | SonicWall SonicOS SSLVPN contains an authentication bypass vulnerability allowing remote attackers to bypass authentication mechanisms and gain unauthorized VPN access to protected networks. | CRITICAL | 9.8 | 93.9% | 213 |
KEV
PoC
No patch
|
| CVE-2019-7481 | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | HIGH | 7.5 | 99.9% | 207 |
KEV
PoC
No patch
|
| CVE-2021-20021 | A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 83.4% | 202 |
KEV
PoC
No patch
|
| CVE-2025-23006 | SonicWall SMA1000 AMC and CMC contain a pre-authentication deserialization vulnerability allowing unauthenticated remote attackers to execute arbitrary OS commands on the management appliance. | CRITICAL | 9.8 | 61.3% | 160 |
KEV
No patch
|
| CVE-2012-2962 | SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 90.3%. | MEDIUM | 6.5 | 90.3% | 158 |
PoC
No patch
|
| CVE-2026-15409 | Server-side request forgery in the SonicWall SMA1000 Appliance Work Place interface lets remote, unauthenticated attackers (PR:N) coerce the appliance into issuing attacker-controlled requests to unintended internal or external destinations. It is confirmed actively exploited (CISA KEV), publicly available exploit code exists, and it carries a maximal CVSS 10.0 with a scope change, making internet-facing SMA1000 appliances a high-priority patch. EPSS is modest at 1.40% (69th percentile), which alongside KEV points to targeted rather than mass-scanning exploitation so far. | CRITICAL | 10.0 | 1.4% | 156 |
KEV
PoC
No patch
|
| CVE-2026-83548 | Pre-authentication server-side request forgery in the SonicWall SMA1000 secure-access appliance's Work Place interface lets a remote unauthenticated attacker abuse an unintended alternate access path to reach internal/sensitive functionality and perform unauthorized operations. It affects SMA1000 firmware up to and including 12.4.3-03453 and 12.5.0-02835 (platform-hotfix builds and older), carries a maximal CVSS of 10.0, and has publicly available exploit code. SonicWall SMA appliances have been a repeated target of real-world attacks, and reporting ties this to broader SMA exploitation activity, though CISA KEV listing is not confirmed in the provided data. | CRITICAL | 10.0 | 0.3% | 155 |
KEV
PoC
No patch
|
| CVE-2014-8420 | The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 73.8%. | CRITICAL | 9.0 | 73.8% | 154 |
PoC
No patch
|
| CVE-2012-3951 | The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 79.5%. | HIGH | 7.5 | 79.5% | 152 |
PoC
No patch
|
| CVE-2014-4977 | Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 84.5%. | MEDIUM | 6.5 | 84.5% | 152 |
PoC
No patch
|
| CVE-2021-20016 | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 9.8 | 40.0% | 139 |
KEV
No patch
|
| CVE-2026-83549 | OS command injection in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote authenticated administrator to execute arbitrary OS commands under specific conditions, achieving full remote code execution on the appliance. The vulnerability (CWE-78) is post-authentication and gated by administrator-level credentials, narrowing the exploitable attack surface to compromised or malicious admin accounts. No public exploit code or active exploitation has been identified at time of analysis, though SMA1000 appliances are high-value targets as network edge remote-access devices. | HIGH | 7.8 | 0.9% | 130 |
KEV
PoC
No patch
|
| CVE-2026-15410 | Post-authentication OS command execution in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote attacker holding administrator credentials to inject and run arbitrary operating-system commands on the appliance under specific conditions. It affects SMA1000 firmware branches 12.4.3 and 12.5.0, is confirmed actively exploited (CISA KEV), and has publicly available exploit code, though the EPSS probability sits at a moderate 1.65% (74th percentile), consistent with targeted rather than mass exploitation. Successful abuse yields total control of the management plane of an internet-facing remote-access appliance. | HIGH | 7.2 | 1.6% | 128 |
KEV
PoC
No patch
|
| CVE-2021-20023 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | MEDIUM | 4.9 | 51.4% | 126 |
KEV
No patch
|