CVE-2025-40596: SonicWall SMA 210 Firmware

High severity, CVSS 7.3. EPSS: 55.7% chance of exploitation in the next 30 days.

A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.

Affected products

• SonicWall SMA 210 Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)
• SonicWall SMA 410 Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)
• SonicWall SMA 500v Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)

Published 2025-07-23. Last modified 2026-06-17.