Advisories · Technology

SonicWall GMS.

Every CVE that names SonicWall GMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18634 CVE record

CVSS 8.4 High

Deserialization of untrusted data in SonicWall GMS
- SonicWall GMS
- Insecure deserialization
Not analysed yet 11 Aug 2026
CVE-2026-66154 CVE record

CVSS 8.3 High

Improper certificate validation in SonicWall GMS
- SonicWall GMS
- Weak cryptography or TLS
Not analysed yet 11 Aug 2026
CVE-2026-66148 CVE record

CVSS 6.3 Medium

Code injection in SonicWall GMS
- SonicWall GMS
- Code injection
Not analysed yet 11 Aug 2026
CVE-2026-66147 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Code injection in SonicWall GMS
- SonicWall GMS
- Code injection
Not analysed yet 11 Aug 2026
CVE-2026-66146 CVE record

CVSS 6.1 Medium

Cross-site scripting in SonicWall GMS
- SonicWall GMS
- Cross-site scripting (XSS)
Not analysed yet 11 Aug 2026
CVE-2026-66145 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Code injection in SonicWall GMS
- SonicWall GMS
- Code injection
Not analysed yet 11 Aug 2026
CVE-2024-29011 CVE record

CVSS 7.5 High

Hard-coded password in SonicWall GMS
- SonicWall GMS
- Hard-coded credentials
Not analysed yet 1 May 2024
CVE-2024-29010 CVE record

CVSS 7.1 High

XML external entity injection in SonicWall GMS
- SonicWall GMS
- XML external entities (XXE)
Not analysed yet 1 May 2024
CVE-2023-34137 CVE record

SonicWall GMS: SonicWall GMS and Analytics CAS Web Services application use static values for…
- SonicWall GMS
- SonicWall Analytics
- CWE-305
Not analysed yet 13 Jul 2023
CVE-2023-34136 CVE record

Unrestricted file upload in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Unrestricted file upload
Not analysed yet 13 Jul 2023
CVE-2023-34135 CVE record

Path traversal in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Path traversal
Not analysed yet 13 Jul 2023
CVE-2023-34134 CVE record

Information disclosure in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-34133 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

SQL injection in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- SQL injection
Not analysed yet 13 Jul 2023
CVE-2023-34132 CVE record

SonicWall GMS: Use of password hash instead of password for authentication vulnerability in SonicWall…
- SonicWall GMS
- SonicWall Analytics
- CWE-836
Not analysed yet 13 Jul 2023
CVE-2023-34131 CVE record

Information disclosure in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-34130 CVE record

Broken or risky cryptographic algorithm in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Weak cryptography or TLS
Not analysed yet 13 Jul 2023
CVE-2023-34129 CVE record

Path traversal in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Path traversal
Not analysed yet 13 Jul 2023
CVE-2023-34128 CVE record

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.
- SonicWall GMS
- SonicWall Analytics
- CWE-260
Not analysed yet 13 Jul 2023
CVE-2023-34127 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

OS command injection in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Command injection
Not analysed yet 13 Jul 2023
CVE-2023-34126 CVE record

Unrestricted file upload in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Unrestricted file upload
Not analysed yet 13 Jul 2023
CVE-2023-34125 CVE record

SonicWall GMS: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to…
- SonicWall GMS
- SonicWall Analytics
- CWE-27
Not analysed yet 13 Jul 2023
CVE-2023-34124 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SonicWall GMS: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient…
- SonicWall GMS
- SonicWall Analytics
- CWE-305
Not analysed yet 13 Jul 2023
CVE-2023-34123 CVE record

Hard-coded cryptographic key in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Hard-coded credentials
Not analysed yet 12 Jul 2023
CVE-2021-20030 CVE record

CVSS 7.5 High

Path traversal in SonicWall GMS
- SonicWall GMS
- Path traversal
Not analysed yet 13 Oct 2022
CVE-2022-22280 CVE record

SQL injection in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics On-Prem
- SQL injection
Not analysed yet 29 Jul 2022
CVE-2019-7478 CVE record

SQL injection in SonicWall GMS
- SonicWall GMS
- SQL injection
Not analysed yet 30 Dec 2019