{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: SonicWall vulnerabilities","home_page_url":"https://patchfirst.co/vendor/sonicwall/","feed_url":"https://patchfirst.co/feed/vendor/sonicwall.json","description":"New and newly exploited SonicWall CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-102255","url":"https://patchfirst.co/cve/CVE-2026-102255/","title":"CVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…","content_text":"SonicWall · SMA1000. Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 71.9 of 100.","summary":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-07T16:17:32.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":71.9,"kev":null,"epss":{"score":0.00981,"percentile":0.62235},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SMA1000","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-83548#kev","url":"https://patchfirst.co/cve/CVE-2026-83548/","title":"[KEV] CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","content_text":"SonicWall · SMA1000 Appliances. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 8.0% (higher than 94.8% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.0 of 100.","summary":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","date_published":"2026-09-02T00:00:00.000Z","date_modified":"2026-09-03T13:06:16.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":79,"kev":{"dateAdded":"2026-09-02","ransomware":false},"epss":{"score":0.08043,"percentile":0.94779},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 Appliances","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-83549#kev","url":"https://patchfirst.co/cve/CVE-2026-83549/","title":"[KEV] CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability","content_text":"SonicWall · SMA1000 Appliances. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 77.6 of 100.","summary":"SonicWall SMA1000 Appliances OS Command Injection Vulnerability","date_published":"2026-09-02T00:00:00.000Z","date_modified":"2026-09-21T14:17:21.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":77.6,"kev":{"dateAdded":"2026-09-02","ransomware":false},"epss":{"score":0.09889,"percentile":0.95568},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 Appliances","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-15409#kev","url":"https://patchfirst.co/cve/CVE-2026-15409/","title":"[KEV] CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","content_text":"SonicWall · SMA1000 Appliances. In CISA KEV since 2026-07-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 6.8% (higher than 94% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Named in 1 threat report. Priority 87.7 of 100.","summary":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","date_published":"2026-07-14T00:00:00.000Z","date_modified":"2026-10-24T21:10:00.000Z","tags":["kev","ransomware","public-exploit","T1190","T1090"],"_patchfirst":{"reason":"kev","priority":87.7,"kev":{"dateAdded":"2026-07-14","ransomware":true},"epss":{"score":0.06795,"percentile":0.93991},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 Appliances","techniqueIds":["T1190","T1090"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-15410#kev","url":"https://patchfirst.co/cve/CVE-2026-15410/","title":"[KEV] CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability","content_text":"SonicWall · SMA1000 Appliances. In CISA KEV since 2026-07-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 11.8% (higher than 96.1% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 86.1 of 100.","summary":"SonicWall SMA1000 Appliances Code Injection Vulnerability","date_published":"2026-07-14T00:00:00.000Z","date_modified":"2026-10-24T21:10:00.000Z","tags":["kev","ransomware","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":86.1,"kev":{"dateAdded":"2026-07-14","ransomware":true},"epss":{"score":0.11791,"percentile":0.96076},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 Appliances","techniqueIds":["T1078","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-40602","url":"https://patchfirst.co/cve/CVE-2025-40602/","title":"CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability","content_text":"SonicWall · SMA1000 appliance. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.2% of CVEs). CVSS 6.6 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 79.9 of 100.","summary":"SonicWall SMA1000 Missing Authorization Vulnerability","date_published":"2025-12-18T00:00:00.000Z","date_modified":"2026-06-17T09:21:49.000Z","tags":["kev","public-exploit","T1068","T1078"],"_patchfirst":{"reason":"published","priority":79.9,"kev":{"dateAdded":"2025-12-17","ransomware":false},"epss":{"score":0.02756,"percentile":0.86228},"cvss":{"score":6.6,"severity":"MEDIUM","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 appliance","techniqueIds":["T1068","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-40601","url":"https://patchfirst.co/cve/CVE-2025-40601/","title":"CVE-2025-40601: A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 0.9% (higher than 60.1% of CVEs). CVSS 7.5 HIGH. Priority 57.3 of 100.","summary":"A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to…","date_published":"2025-11-20T00:00:00.000Z","date_modified":"2025-11-20T18:31:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":57.3,"kev":null,"epss":{"score":0.00914,"percentile":0.6007},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-40600","url":"https://patchfirst.co/cve/CVE-2025-40600/","title":"CVE-2025-40600: Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 9.8 CRITICAL. Priority 59.3 of 100.","summary":"Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote…","date_published":"2025-07-29T00:00:00.000Z","date_modified":"2025-07-30T15:07:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.3,"kev":null,"epss":{"score":0.00981,"percentile":0.62236},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-32819","url":"https://patchfirst.co/cve/CVE-2025-32819/","title":"CVE-2025-32819: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…","content_text":"SonicWall · SMA100. Not in CISA KEV. EPSS 6.5% (higher than 93.7% of CVEs). CVSS 8.8 HIGH. Priority 61.7 of 100.","summary":"A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…","date_published":"2025-05-07T00:00:00.000Z","date_modified":"2026-02-26T18:28:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.7,"kev":null,"epss":{"score":0.06453,"percentile":0.93724},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-44221#kev","url":"https://patchfirst.co/cve/CVE-2023-44221/","title":"[KEV] CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerability","content_text":"SonicWall · SMA100 Appliances. In CISA KEV since 2025-05-01. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism; T1059.004 Unix Shell; T1543 Create or Modify System Process. Priority 62.9 of 100.","summary":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","date_published":"2025-05-01T00:00:00.000Z","date_modified":"2026-06-17T06:27:09.000Z","tags":["kev","T1068","T1548","T1059.004","T1543"],"_patchfirst":{"reason":"kev","priority":62.9,"kev":{"dateAdded":"2025-05-01","ransomware":false},"epss":{"score":0.7625,"percentile":0.99536},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA100 Appliances","techniqueIds":["T1068","T1548","T1059.004","T1543"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-32818","url":"https://patchfirst.co/cve/CVE-2025-32818/","title":"CVE-2025-32818: A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 0.8% (higher than 57.9% of CVEs). CVSS 7.5 HIGH. Priority 56.8 of 100.","summary":"A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote…","date_published":"2025-04-23T00:00:00.000Z","date_modified":"2025-04-23T19:56:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":56.8,"kev":null,"epss":{"score":0.00841,"percentile":0.57862},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-20035#kev","url":"https://patchfirst.co/cve/CVE-2021-20035/","title":"[KEV] CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability","content_text":"SonicWall · SMA100 Appliances. In CISA KEV since 2025-04-16. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 60.8 of 100.","summary":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","date_published":"2025-04-16T00:00:00.000Z","date_modified":"2026-06-17T03:33:11.000Z","tags":["kev","T1059","T1078"],"_patchfirst":{"reason":"kev","priority":60.8,"kev":{"dateAdded":"2025-04-16","ransomware":false},"epss":{"score":0.04406,"percentile":0.91319},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"SonicWall","product":"SMA100 Appliances","techniqueIds":["T1059","T1078"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-53704#kev","url":"https://patchfirst.co/cve/CVE-2024-53704/","title":"[KEV] CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","content_text":"SonicWall · SonicOS. In CISA KEV since 2025-02-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1199 Trusted Relationship; T1212 Exploitation for Credential Access; T1078.004 Cloud Accounts; T1083 File and Directory Discovery. Priority 79.8 of 100.","summary":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","date_published":"2025-02-18T00:00:00.000Z","date_modified":"2026-08-04T05:16:31.000Z","tags":["kev","ransomware","public-exploit","T1199","T1212","T1078.004","T1083"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2025-02-18","ransomware":true},"epss":{"score":0.95314,"percentile":0.99865},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":["T1199","T1212","T1078.004","T1083"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-23006#kev","url":"https://patchfirst.co/cve/CVE-2025-23006/","title":"[KEV] CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability","content_text":"SonicWall · SMA1000 Appliances. In CISA KEV since 2025-01-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.5 of 100.","summary":"SonicWall SMA1000 Appliances Deserialization Vulnerability","date_published":"2025-01-24T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","ransomware","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.5,"kev":{"dateAdded":"2025-01-24","ransomware":true},"epss":{"score":0.26561,"percentile":0.98014},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SMA1000 Appliances","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-12802","url":"https://patchfirst.co/cve/CVE-2024-12802/","title":"CVE-2024-12802: SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 9.1 CRITICAL. Priority 65.8 of 100.","summary":"SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…","date_published":"2025-01-09T00:00:00.000Z","date_modified":"2026-05-22T03:55:48.000Z","tags":[],"_patchfirst":{"reason":"published","priority":65.8,"kev":null,"epss":{"score":0.00487,"percentile":0.41908},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-40762","url":"https://patchfirst.co/cve/CVE-2024-40762/","title":"CVE-2024-40762: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.8 CRITICAL. Priority 59.6 of 100.","summary":"Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token…","date_published":"2025-01-09T00:00:00.000Z","date_modified":"2025-01-09T15:08:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.6,"kev":null,"epss":{"score":0.01025,"percentile":0.63547},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-53705","url":"https://patchfirst.co/cve/CVE-2024-53705/","title":"CVE-2024-53705: A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 0.7% (higher than 53.7% of CVEs). CVSS 7.5 HIGH. Priority 56.0 of 100.","summary":"A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to…","date_published":"2025-01-09T00:00:00.000Z","date_modified":"2025-01-09T15:03:52.000Z","tags":[],"_patchfirst":{"reason":"published","priority":56,"kev":null,"epss":{"score":0.00716,"percentile":0.53742},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-40766#kev","url":"https://patchfirst.co/cve/CVE-2024-40766/","title":"[KEV] CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability","content_text":"SonicWall · SonicOS. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 18.4% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 74.3 of 100.","summary":"SonicWall SonicOS Improper Access Control Vulnerability","date_published":"2024-09-09T00:00:00.000Z","date_modified":"2026-09-21T21:17:02.000Z","tags":["kev","ransomware","T1190","T1005","T1499.004"],"_patchfirst":{"reason":"kev","priority":74.3,"kev":{"dateAdded":"2024-09-09","ransomware":true},"epss":{"score":0.18379,"percentile":0.97226},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":["T1190","T1005","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-5970","url":"https://patchfirst.co/cve/CVE-2023-5970/","title":"CVE-2023-5970: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…","content_text":"SonicWall · SMA100. Not in CISA KEV. EPSS 0.9% (higher than 60% of CVEs). Priority 47.0 of 100.","summary":"Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…","date_published":"2023-12-05T00:00:00.000Z","date_modified":"2024-08-02T08:14:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":47,"kev":null,"epss":{"score":0.00911,"percentile":0.59971},"cvss":null,"vendor":"SonicWall","product":"SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39280","url":"https://patchfirst.co/cve/CVE-2023-39280/","title":"CVE-2023-39280: SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.","summary":"SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL…","date_published":"2023-10-17T00:00:00.000Z","date_modified":"2024-09-13T15:59:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.4,"kev":null,"epss":{"score":0.00969,"percentile":0.61831},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39279","url":"https://patchfirst.co/cve/CVE-2023-39279/","title":"CVE-2023-39279: SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.","summary":"SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint…","date_published":"2023-10-17T00:00:00.000Z","date_modified":"2024-09-13T16:00:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.4,"kev":null,"epss":{"score":0.00969,"percentile":0.61831},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39278","url":"https://patchfirst.co/cve/CVE-2023-39278/","title":"CVE-2023-39278: SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.","summary":"SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi…","date_published":"2023-10-17T00:00:00.000Z","date_modified":"2024-09-13T16:01:51.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.4,"kev":null,"epss":{"score":0.00969,"percentile":0.6183},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39277","url":"https://patchfirst.co/cve/CVE-2023-39277/","title":"CVE-2023-39277: SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.","summary":"SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL…","date_published":"2023-10-17T00:00:00.000Z","date_modified":"2024-09-13T16:03:01.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.4,"kev":null,"epss":{"score":0.00969,"percentile":0.6183},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-39276","url":"https://patchfirst.co/cve/CVE-2023-39276/","title":"CVE-2023-39276: SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.","summary":"SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads…","date_published":"2023-10-17T00:00:00.000Z","date_modified":"2024-09-13T16:04:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.4,"kev":null,"epss":{"score":0.00969,"percentile":0.6183},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34132","url":"https://patchfirst.co/cve/CVE-2023-34132/","title":"CVE-2023-34132: Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…","content_text":"SonicWall · GMS. Not in CISA KEV. EPSS 7.7% (higher than 94.6% of CVEs). Public exploit code exists. Priority 68.9 of 100.","summary":"Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…","date_published":"2023-07-13T00:00:00.000Z","date_modified":"2025-02-13T16:55:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.9,"kev":null,"epss":{"score":0.07743,"percentile":0.94623},"cvss":null,"vendor":"SonicWall","product":"GMS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-34124","url":"https://patchfirst.co/cve/CVE-2023-34124/","title":"CVE-2023-34124: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…","content_text":"SonicWall · GMS. Not in CISA KEV. EPSS 50.5% (higher than 98.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.6 of 100.","summary":"The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…","date_published":"2023-07-13T00:00:00.000Z","date_modified":"2025-04-08T15:23:32.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.6,"kev":null,"epss":{"score":0.50477,"percentile":0.98912},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"GMS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-34133","url":"https://patchfirst.co/cve/CVE-2023-34133/","title":"CVE-2023-34133: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…","content_text":"SonicWall · GMS. Not in CISA KEV. EPSS 72.8% (higher than 99.45% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 65.1 of 100.","summary":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…","date_published":"2023-07-13T00:00:00.000Z","date_modified":"2025-04-23T16:20:21.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.1,"kev":null,"epss":{"score":0.72767,"percentile":0.99447},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"GMS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-34127","url":"https://patchfirst.co/cve/CVE-2023-34127/","title":"CVE-2023-34127: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…","content_text":"SonicWall · GMS. Not in CISA KEV. EPSS 85.8% (higher than 99.73% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.","summary":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…","date_published":"2023-07-13T00:00:00.000Z","date_modified":"2025-04-23T16:20:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.1,"kev":null,"epss":{"score":0.85811,"percentile":0.99727},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"GMS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-0656","url":"https://patchfirst.co/cve/CVE-2023-0656/","title":"CVE-2023-0656: A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 41.3% (higher than 98.7% of CVEs). Public exploit code exists. Priority 60.4 of 100.","summary":"A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of…","date_published":"2023-03-02T00:00:00.000Z","date_modified":"2025-03-07T17:28:09.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":60.4,"kev":null,"epss":{"score":0.41319,"percentile":0.98668},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-0126","url":"https://patchfirst.co/cve/CVE-2023-0126/","title":"CVE-2023-0126: Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…","content_text":"SonicWall · SonicWall SMA1000. Not in CISA KEV. EPSS 72.7% (higher than 99.44% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.1 of 100.","summary":"Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…","date_published":"2023-01-19T00:00:00.000Z","date_modified":"2025-04-03T19:57:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.1,"kev":null,"epss":{"score":0.72699,"percentile":0.99445},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicWall SMA1000","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-2915","url":"https://patchfirst.co/cve/CVE-2022-2915/","title":"CVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to…","content_text":"SonicWall · SMA100. Not in CISA KEV. EPSS 6.9% (higher than 94% of CVEs). Priority 53.8 of 100.","summary":"A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to…","date_published":"2022-08-26T00:00:00.000Z","date_modified":"2024-08-03T00:52:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.8,"kev":null,"epss":{"score":0.06865,"percentile":0.94043},"cvss":null,"vendor":"SonicWall","product":"SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-1703","url":"https://patchfirst.co/cve/CVE-2022-1703/","title":"CVE-2022-1703: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a…","content_text":"SonicWall · SMA100. Not in CISA KEV. EPSS 13.0% (higher than 96.3% of CVEs). Priority 54.3 of 100.","summary":"Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a…","date_published":"2022-06-03T00:00:00.000Z","date_modified":"2024-08-03T00:10:03.000Z","tags":[],"_patchfirst":{"reason":"published","priority":54.3,"kev":null,"epss":{"score":0.13044,"percentile":0.96338},"cvss":null,"vendor":"SonicWall","product":"SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-22279","url":"https://patchfirst.co/cve/CVE-2022-22279/","title":"CVE-2022-22279: A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and…","content_text":"SonicWall · SonicWall SRA/SMA100. Not in CISA KEV. EPSS 1.1% (higher than 65.9% of CVEs). Priority 58.9 of 100.","summary":"A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and…","date_published":"2022-04-13T00:00:00.000Z","date_modified":"2024-08-03T03:07:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":58.9,"kev":null,"epss":{"score":0.01111,"percentile":0.6591},"cvss":null,"vendor":"SonicWall","product":"SonicWall SRA/SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-20028#kev","url":"https://patchfirst.co/cve/CVE-2021-20028/","title":"[KEV] CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","content_text":"SonicWall · Secure Remote Access (SRA). In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.1% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.4 of 100.","summary":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-17T03:33:10.000Z","tags":["kev","ransomware","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":78.4,"kev":{"dateAdded":"2022-03-28","ransomware":true},"epss":{"score":0.30084,"percentile":0.98211},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"Secure Remote Access (SRA)","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-7483#kev","url":"https://patchfirst.co/cve/CVE-2019-7483/","title":"[KEV] CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability","content_text":"SonicWall · SMA100. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery. Priority 61.4 of 100.","summary":"SonicWall SMA100 Directory Traversal Vulnerability","date_published":"2022-03-28T00:00:00.000Z","date_modified":"2026-06-17T02:40:39.000Z","tags":["kev","T1190","T1083"],"_patchfirst":{"reason":"kev","priority":61.4,"kev":{"dateAdded":"2022-03-28","ransomware":false},"epss":{"score":0.0401,"percentile":0.9054},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA100","techniqueIds":["T1190","T1083"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-22274","url":"https://patchfirst.co/cve/CVE-2022-22274/","title":"CVE-2022-22274: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker…","content_text":"SonicWall · SonicOS. Not in CISA KEV. EPSS 75.5% (higher than 99.52% of CVEs). Public exploit code exists. Priority 61.3 of 100.","summary":"A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker…","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2024-08-03T03:07:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":61.3,"kev":null,"epss":{"score":0.75521,"percentile":0.99517},"cvss":null,"vendor":"SonicWall","product":"SonicOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-5135#kev","url":"https://patchfirst.co/cve/CVE-2020-5135/","title":"[KEV] CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability","content_text":"SonicWall · SonicOS. In CISA KEV since 2022-03-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.9% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 74.5 of 100.","summary":"SonicWall SonicOS Buffer Overflow Vulnerability","date_published":"2022-03-15T00:00:00.000Z","date_modified":"2026-06-17T03:20:57.000Z","tags":["kev","ransomware","T1190","T1059","T1499.004"],"_patchfirst":{"reason":"kev","priority":74.5,"kev":{"dateAdded":"2022-03-15","ransomware":true},"epss":{"score":0.26869,"percentile":0.98033},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicOS","techniqueIds":["T1190","T1059","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-20038#kev","url":"https://patchfirst.co/cve/CVE-2021-20038/","title":"[KEV] CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","content_text":"SonicWall · SMA 100 Appliances. In CISA KEV since 2022-01-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.","summary":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","date_published":"2022-01-28T00:00:00.000Z","date_modified":"2026-06-17T03:33:11.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2022-01-28","ransomware":true},"epss":{"score":0.99912,"percentile":0.99967},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SMA 100 Appliances","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-20039","url":"https://patchfirst.co/cve/CVE-2021-20039/","title":"CVE-2021-20039: Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method…","content_text":"SonicWall · SonicWall SMA100. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 68.0 of 100.","summary":"Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method…","date_published":"2021-12-08T00:00:00.000Z","date_modified":"2025-09-05T17:09:47.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68,"kev":null,"epss":{"score":0.78746,"percentile":0.9959},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicWall SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2021-20021#kev","url":"https://patchfirst.co/cve/CVE-2021-20021/","title":"[KEV] CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerability","content_text":"SonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 88.8% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1136 Create Account. Priority 79.8 of 100.","summary":"SonicWall Email Security Improper Privilege Management Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-12T05:17:33.000Z","tags":["kev","ransomware","public-exploit","T1190","T1136"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.8878,"percentile":0.99775},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SonicWall Email Security","techniqueIds":["T1190","T1136"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-20016#kev","url":"https://patchfirst.co/cve/CVE-2021-20016/","title":"[KEV] CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability","content_text":"SonicWall · SSLVPN SMA100. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 40.0% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Named in 1 threat report. Priority 78.5 of 100.","summary":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-12T05:17:33.000Z","tags":["kev","ransomware","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":78.5,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.40038,"percentile":0.98629},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"SSLVPN SMA100","techniqueIds":["T1190","T1005"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-7481#kev","url":"https://patchfirst.co/cve/CVE-2019-7481/","title":"[KEV] CVE-2019-7481: SonicWall SMA100 SQL Injection Vulnerability","content_text":"SonicWall · SMA100. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.","summary":"SonicWall SMA100 SQL Injection Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-08-12T05:17:26.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.99906,"percentile":0.99967},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SMA100","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-20022#kev","url":"https://patchfirst.co/cve/CVE-2021-20022/","title":"[KEV] CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability","content_text":"SonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 16.6% (higher than 97% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1105 Ingress Tool Transfer. Priority 72.4 of 100.","summary":"SonicWall Email Security Unrestricted Upload of File Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-10-01T21:17:15.000Z","tags":["kev","ransomware","T1078","T1105"],"_patchfirst":{"reason":"kev","priority":72.4,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.16639,"percentile":0.97017},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"SonicWall","product":"SonicWall Email Security","techniqueIds":["T1078","T1105"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-20023#kev","url":"https://patchfirst.co/cve/CVE-2021-20023/","title":"[KEV] CVE-2021-20023: SonicWall Email Security Path Traversal Vulnerability","content_text":"SonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 51.7% (higher than 98.9% of CVEs). CVSS 4.9 MEDIUM. ATT&CK: T1078 Valid Accounts; T1005 Data from Local System. Priority 71.2 of 100.","summary":"SonicWall Email Security Path Traversal Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-10-01T21:17:16.000Z","tags":["kev","ransomware","T1078","T1005"],"_patchfirst":{"reason":"kev","priority":71.2,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.51689,"percentile":0.98946},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"SonicWall","product":"SonicWall Email Security","techniqueIds":["T1078","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-20034","url":"https://patchfirst.co/cve/CVE-2021-20034/","title":"CVE-2021-20034: An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path…","content_text":"SonicWall · SMA100. Not in CISA KEV. EPSS 81.8% (higher than 99.65% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path…","date_published":"2021-09-27T00:00:00.000Z","date_modified":"2024-08-03T17:30:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.81831,"percentile":0.99646},"cvss":null,"vendor":"SonicWall","product":"SMA100","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2018-9866","url":"https://patchfirst.co/cve/CVE-2018-9866/","title":"CVE-2018-9866: A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…","content_text":"SonicWall · Global Management System (GMS). Not in CISA KEV. EPSS 4.5% (higher than 91.5% of CVEs). CVSS 9.8 CRITICAL. Priority 61.7 of 100.","summary":"A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…","date_published":"2018-08-03T00:00:00.000Z","date_modified":"2025-05-05T19:08:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.7,"kev":null,"epss":{"score":0.04504,"percentile":0.91496},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"SonicWall","product":"Global Management System (GMS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}