SonicWall SMA8200V vulnerabilities

10 CVEs affecting SonicWall SMA8200V, 6 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-83549, published 2026-09-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability, published 2025-01-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-01-24. EPSS: 23.4% chance of exploitation in the next 30 days. Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific…
CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability, published 2026-07-14. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2026-07-14. EPSS: 11.8% chance of exploitation in the next 30 days. Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could…
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability, published 2026-09-01. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-09-02. EPSS: 9.9% chance of exploitation in the next 30 days. Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC)…
CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability, published 2026-09-01. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-09-02. EPSS: 8% chance of exploitation in the next 30 days. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit…
CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability, published 2026-07-14. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-07-14. EPSS: 6.8% chance of exploitation in the next 30 days. A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make…
CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability, published 2025-12-18. Medium severity, CVSS 6.6. Actively exploited: in CISA KEV since 2025-12-17. EPSS: 2.8% chance of exploitation in the next 30 days. A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2026-4114, published 2026-04-09. Medium severity, CVSS 6.6. EPSS: 0.7% chance of exploitation in the next 30 days. Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4116, published 2026-04-09. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4113, published 2026-04-09. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112, published 2026-04-09. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator…