Sonicwall Sma7210 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sonicwall Sma7210 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2025-23006 — CVSS 9.8 (critical) — actively exploited: Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC)…
• CVE-2026-4112 — CVSS 7.2 (high): Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a…
• CVE-2026-4113 — CVSS 7.2 (high): An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN…
• CVE-2026-4116 — CVSS 7.2 (high): Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass…
• CVE-2025-40602 — CVSS 6.6 (medium) — actively exploited: A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
• CVE-2026-4114 — CVSS 6.6 (medium): Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP…