Sysprobs Sysprobs

CISA KEV by vendor

SonicWall vulnerabilities in the CISA KEV catalogue

19 SonicWall entries in CISA's Known Exploited Vulnerabilities catalogue, 13 of them (68 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 2 September 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

19entries, 1.1% of the catalogue
13known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

SonicWall products in the catalogue, by number of entries
Product, as CISA names itEntries
SMA1000 Appliances5
SonicOS3
SonicWall Email Security3
SMA100 Appliances2
SMA1002
SMA1000 appliance1
Secure Remote Access (SRA)1
SMA 100 Appliances1
SSLVPN SMA1001

Latest additions

The 10 most recent SonicWall entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-83549SMA1000 Appliances2026-09-022026-09-05Unknown7.8 High9.8%Not auto, total3 days + triage
CVE-2026-83548SMA1000 Appliances2026-09-022026-09-05Unknown10.0 Critical8.0%Auto, total3 days + triage
CVE-2026-15410SMA1000 Appliances2026-07-142026-07-17Known7.2 High11.7%Not auto, total3 days + triage
CVE-2026-15409SMA1000 Appliances2026-07-142026-07-17Known10.0 Critical6.7%Auto, total3 days + triage
CVE-2025-40602SMA1000 appliance2025-12-172025-12-24Unknown6.6 Medium2.7%Not auto, total3 days + triage
CVE-2023-44221SMA100 Appliances2025-05-012025-05-22Unknown7.2 High76.2%Not auto, total3 days + triage
CVE-2021-20035SMA100 Appliances2025-04-162025-05-07Unknown6.5 Medium4.4%Not auto, total3 days + triage
CVE-2024-53704SonicOS2025-02-182025-03-11Known9.8 Critical95.3%Auto, partial3 days
CVE-2025-23006SMA1000 Appliances2025-01-242025-02-14Known9.8 Critical26.5%Auto, total3 days + triage
CVE-2024-40766SonicOS2024-09-092024-09-30Known9.8 Critical18.3%Auto, partial3 days

All 19 entries

Every SonicWall entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-83549SMA1000 Appliances2026-09-022026-09-05Unknown7.8 High9.8%Not auto, total3 days + triage
CVE-2026-83548SMA1000 Appliances2026-09-022026-09-05Unknown10.0 Critical8.0%Auto, total3 days + triage
CVE-2026-15410SMA1000 Appliances2026-07-142026-07-17Known7.2 High11.7%Not auto, total3 days + triage
CVE-2026-15409SMA1000 Appliances2026-07-142026-07-17Known10.0 Critical6.7%Auto, total3 days + triage
CVE-2025-40602SMA1000 appliance2025-12-172025-12-24Unknown6.6 Medium2.7%Not auto, total3 days + triage
CVE-2023-44221SMA100 Appliances2025-05-012025-05-22Unknown7.2 High76.2%Not auto, total3 days + triage
CVE-2021-20035SMA100 Appliances2025-04-162025-05-07Unknown6.5 Medium4.4%Not auto, total3 days + triage
CVE-2024-53704SonicOS2025-02-182025-03-11Known9.8 Critical95.3%Auto, partial3 days
CVE-2025-23006SMA1000 Appliances2025-01-242025-02-14Known9.8 Critical26.5%Auto, total3 days + triage
CVE-2024-40766SonicOS2024-09-092024-09-30Known9.8 Critical18.3%Auto, partial3 days
CVE-2021-20028Secure Remote Access (SRA)2022-03-282022-04-18Known9.8 Critical30.0%Auto, total3 days + triage
CVE-2019-7483SMA1002022-03-282022-04-18Unknown7.5 High4.0%Auto, partial3 days
CVE-2020-5135SonicOS2022-03-152022-04-05Known9.8 Critical26.8%Auto, total3 days + triage
CVE-2021-20038SMA 100 Appliances2022-01-282022-02-11Known9.8 Critical99.9%Auto, total3 days + triage
CVE-2021-20023SonicWall Email Security2021-11-032021-11-17Known4.9 Medium51.6%Auto, total3 days + triage
CVE-2021-20022SonicWall Email Security2021-11-032021-11-17Known7.2 High16.6%Auto, total3 days + triage
CVE-2021-20021SonicWall Email Security2021-11-032021-11-17Known9.8 Critical88.7%Auto, total3 days + triage
CVE-2021-20016SSLVPN SMA1002021-11-032021-11-17Known9.8 Critical40.0%Auto, total3 days + triage
CVE-2019-7481SMA1002021-11-032022-05-03Known7.5 High99.9%Auto, partial3 days

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter SonicWall in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.