SonicWall vulnerabilities under active exploitation

14 CVEs on this page carry evidence of exploitation.

Which SonicWall vulnerabilities are being exploited?

13 of them are in the CISA KEV catalog.

4 were added to KEV in the last 90 days.

• CVE-2026-33824 In KEV since 2026-08-18 · EPSS 2% · No fix identified here
• CVE-2026-34486 In KEV since 2026-08-04 · EPSS 7% · Fix identified
• CVE-2026-15409 In KEV since 2026-07-14 · No fix identified here
• CVE-2026-15410 In KEV since 2026-07-14 · No fix identified here
• CVE-2026-0300 In KEV since 2026-05-06 · EPSS 32% · No fix identified here
• CVE-2026-39987 In KEV since 2026-04-23 · EPSS 38% · No fix identified here
• CVE-2026-33825 In KEV since 2026-04-22 · Fix identified
• CVE-2009-0238 In KEV since 2026-04-14 · EPSS 43% · No fix identified here
• CVE-2026-3055 In KEV since 2026-03-30 · No fix identified here
• CVE-2026-33017 In KEV since 2026-03-25 · No fix identified here
• CVE-2025-68613 In KEV since 2026-03-11 · EPSS 99% · No fix identified here
• CVE-2026-20127 In KEV since 2026-02-25 · EPSS 88% · Fix identified
• CVE-2024-40766 In KEV since 2024-09-09 · EPSS 18% · Used in ransomware · No fix identified here
• CVE-2026-21858 EPSS 78% · No fix identified here

Which of them have a fix?

We can name a fix for 3 of them.

For the rest we hold no patch identifier, which is not the same as no patch existing.

What PlainSec published about SonicWall

• SonicWall SMA1000 Fixes Hide a Patch-Tracking Trap (2026-10-07)
• Metasploit 6.5 Lowers the Bar for Exploitation (2026-08-15)
• SonicWall GMS RCEs Hit Retired Management Platform (2026-08-13)
• SMA1000 Access Turned Into Ransomware Fuel (2026-08-05)
• SonicWall Patch Leaves Old Trust State Behind (2026-06-23)
• Patched SonicWall VPNs Can Still Bypass MFA (2026-05-21)
• SonicOS Scan Spike May Foreshadow Next Advisory (2026-05-21)
• Session Spikes Warn Before Network CVE Disclosures (2026-04-20)
• Middle East Brute-Force Surge Targets Edge Appliances (2026-04-15)
• Akira Executes Full Ransomware Attacks in Under One Hour (2026-04-03)

Which SonicWall products this page tracks

• SonicOS
• SonicWall
• SonicWall Firewall
• SonicWall NSa
• SonicWall SMA
• SonicWall Secure Mobile Access
• SonicWall TZ

KEV and EPSS are re-checked daily. Page last updated 2026-10-07.