SonicWall vulnerabilities under active exploitation

10 CVEs on this page carry evidence of exploitation.

Which SonicWall vulnerabilities are being exploited?

8 of them are in the CISA KEV catalog.

One was added to KEV in the last 90 days.

• CVE-2026-34486 In KEV since 2026-08-04 · EPSS 83% · No fix identified here
• CVE-2026-0300 In KEV since 2026-05-06 · EPSS 32% · No fix identified here
• CVE-2026-39987 In KEV since 2026-04-23 · EPSS 97% · No fix identified here
• CVE-2026-3055 In KEV since 2026-03-30 · No fix identified here
• CVE-2026-33017 In KEV since 2026-03-25 · No fix identified here
• CVE-2025-68613 In KEV since 2026-03-11 · EPSS 98% · No fix identified here
• CVE-2026-20127 In KEV since 2026-02-25 · EPSS 88% · Fix identified
• CVE-2024-40766 In KEV since 2024-09-09 · EPSS 18% · Used in ransomware · No fix identified here
• CVE-2026-21858 EPSS 73% · No fix identified here
• CVE-2026-33824 EPSS 56% · No fix identified here

Which of them have a fix?

We can name a fix for one of them.

For the rest we hold no patch identifier, which is not the same as no patch existing.

What PlainSec published about SonicWall

• Session Spikes Warn Before Network CVE Disclosures (2026-04-20)

Which SonicWall products this page tracks

• SonicOS
• SonicWall
• SonicWall Firewall
• SonicWall NSa
• SonicWall SMA
• SonicWall Secure Mobile Access
• SonicWall TZ

KEV and EPSS are re-checked daily. Page last updated 2026-08-16.