Skip to main content
EVULNABLE
Home

SonicWall

CVEs currently on EVULNABLE's Priority Feed for SonicWall, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 2 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 2 ransomware-linked of 2 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 2 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
2
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1322
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3120
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 19 SonicWall CVEs in EVULNABLE's ranked feed.

#1 94 Immediate CVE-2021-20038 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2022-01-28

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#2 93 Immediate CVE-2024-53704 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability KEV + ransomware, EPSS 95.3%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS95.3% · 99.87th pctlKEV since2025-02-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#3 91 Immediate CVE-2019-7481 KEV since 2021 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SMA100 SQL Injection Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 91/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.97th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#4 91 Immediate CVE-2021-20021 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability KEV + ransomware, EPSS 88.8%

EVRS 91/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS88.8% · 99.78th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#5 85 Immediate CVE-2021-20016 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SSLVPN SMA100 SQL Injection Vulnerability KEV + ransomware, EPSS 40.0%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS40.0% · 98.6th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#6 85 Immediate CVE-2021-20028 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability KEV + ransomware, EPSS 30.1%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS30.1% · 98.2nd pctlKEV since2022-03-28

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#7 85 Immediate CVE-2020-5135 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SonicOS Buffer Overflow Vulnerability KEV + ransomware, EPSS 26.9%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS26.9% · 98th pctlKEV since2022-03-15

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#8 85 Immediate CVE-2025-23006 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Deserialization Vulnerability KEV + ransomware, EPSS 23.4%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS23.4% · 97.8th pctlKEV since2025-01-24

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#9 85 Immediate CVE-2024-40766 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall SonicOS Improper Access Control Vulnerability KEV + ransomware, EPSS 18.4%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS18.4% · 97.2nd pctlKEV since2024-09-09

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#10 85 Immediate CVE-2026-15409 ExigentCISA federal deadline · Overdue by 3 monthsRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability KEV + ransomware, EPSS 6.8%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS6.8% · 93.9th pctlKEV since2026-07-14

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#11 78 Urgent CVE-2023-44221 KEV since 2025 · listed over a yearCISA KEV SonicWall — SonicWall SMA100 Appliances OS Command Injection Vulnerability KEV, EPSS 76.2%

EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS76.2% · 99.53rd pctlKEV since2025-05-01

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.762.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#12 75 Urgent CVE-2021-20023 KEV since 2021 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall Email Security Path Traversal Vulnerability KEV + ransomware, EPSS 51.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS4.9 (NVD)EPSS51.7% · 98.9th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#13 75 Urgent CVE-2021-20022 KEV since 2021 · listed over a yearRansomwareCISA KEV SonicWall — SonicWall Email Security Unrestricted Upload of File Vulnerability KEV + ransomware, EPSS 16.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS16.6% · 97th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#14 75 Urgent CVE-2026-15410 CISA federal deadline · Overdue by 3 monthsRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Code Injection Vulnerability KEV + ransomware, EPSS 11.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS11.8% · 96th pctlKEV since2026-07-14

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#15 75 Urgent CVE-2026-83549 CISA federal deadline · Overdue by 42 daysCISA KEV SonicWall — SonicWall SMA1000 Appliances OS Command Injection Vulnerability KEV, EPSS 9.9%, added to KEV within the last 90 days

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS9.9% · 95.5th pctlKEV since2026-09-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.099.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#16 75 Urgent CVE-2026-83548 CISA federal deadline · Overdue by 42 daysCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability KEV, EPSS 8.0%, added to KEV within the last 90 days

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS8.0% · 94.7th pctlKEV since2026-09-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.080.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#17 75 Urgent CVE-2021-20035 KEV since 2025 · listed over a yearCISA KEV SonicWall — SonicWall SMA100 Appliances OS Command Injection Vulnerability KEV, EPSS 4.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS4.2% · 90.8th pctlKEV since2025-04-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.042.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#18 75 Urgent CVE-2019-7483 KEV since 2022 · listed over a yearCISA KEV SonicWall — SonicWall SMA100 Directory Traversal Vulnerability KEV, EPSS 4.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS4.0% · 90.4th pctlKEV since2022-03-28

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.040.

Full CVE pageNVD ↗CISA KEV ↗
#19 75 Urgent CVE-2025-40602 CISA federal deadline · Overdue by 10 monthsCISA KEV SonicWall — SonicWall SMA1000 Missing Authorization Vulnerability KEV, EPSS 2.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.6 (NVD)EPSS2.8% · 86th pctlKEV since2025-12-17

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.028.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗