Product of SonicWall

SonicOS

As of , 3 SonicWall SonicOS vulnerabilities are on CISA's list of exploited vulnerabilities, 3 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2024-53704.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2024-53704SSLVPN Improper AuthenticationSonicWall SonicOSPatch this weekRansomware use; EPSS 0.950.95
2CVE-2024-40766Improper Access ControlSonicWall SonicOSPatch this weekRansomware use0.18
3CVE-2020-5135Buffer OverflowSonicWall SonicOSPatch this weekRansomware use0.27

Added each year

0.512022: 1120222023: nonenone20232024: 1120242025: 1120252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20221
2023none
20241
20251
2026none

Used in ransomware

Changes CISA made to these entries

  1. CVE-2020-5135 SonicWall SonicOSRansomware use: Unknown to Known.
  2. CVE-2024-53704 SonicWall SonicOSRansomware use: Unknown to Known.
  3. CVE-2024-40766 SonicWall SonicOSEdited: notes.

Every change we recorded