CVE-2025-40598: SonicWall SMA 210 Firmware

Medium severity, CVSS 6.1. EPSS: 64.3% chance of exploitation in the next 30 days.

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.

Affected products

• SonicWall SMA 210 Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)
• SonicWall SMA 410 Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)
• SonicWall SMA 500v Firmware: before 10.2.2.1-90sv (fixed in 10.2.2.1-90sv)

Published 2025-07-23. Last modified 2026-06-17.