pwn.watch: SonicWall incident updates https://pwn.watch/t/sonicwall Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability: CISA added CVE-2026-83548, CVE-2026-83549 to the KEV catalog (due 2026-09-05). https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-83548 sonicwall-sma1000-appliances-cve-2026-83548:2026-09-02:CISA added CVE-2026-83548, CVE-2026-83549 to the KEV catalog (due 2026-09-05). Wed, 02 Sep 2026 00:00:00 GMT high Status: closed, patched [high] SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability: CISA added CVE-2026-15409, CVE-2026-15410 to the KEV catalog (due 2026-07-17). https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2026-15409 sonicwall-sma1000-appliances-cve-2026-15409:2026-07-14:CISA added CVE-2026-15409, CVE-2026-15410 to the KEV catalog (due 2026-07-17). Tue, 14 Jul 2026 00:00:00 GMT high Status: closed, patched [medium] SonicWall SMA1000 appliance: SMA1000 Missing Authorization Vulnerability: CISA added CVE-2025-40602 to the KEV catalog (due 2025-12-24). https://pwn.watch/i/sonicwall-sma1000-appliance-cve-2025-40602 sonicwall-sma1000-appliance-cve-2025-40602:2025-12-17:CISA added CVE-2025-40602 to the KEV catalog (due 2025-12-24). Wed, 17 Dec 2025 00:00:00 GMT medium Status: closed, patched [high] SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall says the investigation is complete and attributes it to a state-sponsored actor https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 sonicwall-mysonicwall-cloud-backup-breach-2025:2025-11:SonicWall says the investigation is complete and attributes it to a state-sponsored actor Sat, 01 Nov 2025 00:00:00 GMT high Source: https://www.sonicwall.com/blog/cloud-backup-security-incident-investigation-complete-and-strengthened-cyber-resilience Status: closed, no-fix-needed [high] SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall and Mandiant confirm all cloud-backup customers' files were accessed https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 sonicwall-mysonicwall-cloud-backup-breach-2025:2025-10-08:SonicWall and Mandiant confirm all cloud-backup customers' files were accessed Wed, 08 Oct 2025 00:00:00 GMT high Source: https://www.bleepingcomputer.com/news/security/sonicwall-firewall-configs-stolen-for-all-cloud-backup-customers/ Status: closed, no-fix-needed [high] SonicWall: state actor stole firewall config backups of every cloud-backup customer: SonicWall discloses unauthorized access to cloud backup files (initially <5% of customers) https://pwn.watch/i/sonicwall-mysonicwall-cloud-backup-breach-2025 sonicwall-mysonicwall-cloud-backup-breach-2025:2025-09-17:SonicWall discloses unauthorized access to cloud backup files (initially <5% of customers) Wed, 17 Sep 2025 00:00:00 GMT high Source: https://www.sonicwall.com/support/notices/mysonicwall-cloud-backup-file-incident/kA1VN0000000RoD0AU Status: closed, no-fix-needed [high] SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability: CISA added CVE-2023-44221 to the KEV catalog (due 2025-05-22). https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221 sonicwall-sma100-appliances-cve-2023-44221:2025-05-01:CISA added CVE-2023-44221 to the KEV catalog (due 2025-05-22). Thu, 01 May 2025 00:00:00 GMT high Status: closed, patched [medium] SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability: CISA added CVE-2021-20035 to the KEV catalog (due 2025-05-07). https://pwn.watch/i/sonicwall-sma100-appliances-cve-2021-20035 sonicwall-sma100-appliances-cve-2021-20035:2025-04-16:CISA added CVE-2021-20035 to the KEV catalog (due 2025-05-07). Wed, 16 Apr 2025 00:00:00 GMT medium Status: closed, patched [critical] SonicWall SonicOS: SonicOS SSLVPN Improper Authentication Vulnerability: CISA added CVE-2024-53704 to the KEV catalog (due 2025-03-11). https://pwn.watch/i/sonicwall-sonicos-cve-2024-53704 sonicwall-sonicos-cve-2024-53704:2025-02-18:CISA added CVE-2024-53704 to the KEV catalog (due 2025-03-11). Tue, 18 Feb 2025 00:00:00 GMT critical Status: closed, patched [critical] SonicWall SMA1000 Appliances: SMA1000 Appliances Deserialization Vulnerability: CISA added CVE-2025-23006 to the KEV catalog (due 2025-02-14). https://pwn.watch/i/sonicwall-sma1000-appliances-cve-2025-23006 sonicwall-sma1000-appliances-cve-2025-23006:2025-01-24:CISA added CVE-2025-23006 to the KEV catalog (due 2025-02-14). Fri, 24 Jan 2025 00:00:00 GMT critical Status: closed, patched [critical] SonicWall SonicOS Improper Access Control: CISA added CVE-2024-40766 to the KEV catalog (federal deadline 2024-09-30) https://pwn.watch/i/sonicwall-sonicos-cve-2024-40766 sonicwall-sonicos-cve-2024-40766:2024-09-09:CISA added CVE-2024-40766 to the KEV catalog (federal deadline 2024-09-30) Mon, 09 Sep 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] SonicWall SonicOS Improper Access Control: CVE-2024-40766 published https://pwn.watch/i/sonicwall-sonicos-cve-2024-40766 sonicwall-sonicos-cve-2024-40766:2024-08-23:CVE-2024-40766 published Fri, 23 Aug 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-40766 Status: closed, patched