Product by SonicWall

    SonicWall GMS

    24 known vulnerabilities in SonicWall GMS (SonicWall), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SonicWall GMS (SonicWall)
    CriticalCVE-2023-34124

    SonicWall GMS: Authentication Bypass by Primary Weakness

    also in 2 other products

    		9.8
    HighCVE-2023-34127

    SonicWall GMS: OS Command Injection

    also in 2 other products

    		8.8
    HighCVE-2023-34129

    SonicWall GMS: Path Traversal

    also in 2 other products

    		8.8
    CriticalCVE-2023-34132

    SonicWall GMS: Use of Password Hash Instead of Password for Authentication

    also in 2 other products

    		9.8
    HighCVE-2023-34133

    SonicWall GMS: SQL Injection

    also in 2 other products

    		7.5
    CriticalCVE-2026-66147

    SonicWall GMS: Code Injection

    		9.4
    MediumCVE-2023-34125

    SonicWall GMS: Path Traversal: 'dir/../../filename'

    also in 2 other products

    		6.5
    CriticalCVE-2026-66145

    SonicWall GMS: Code Injection

    		9.1
    MediumCVE-2026-66148

    SonicWall GMS: Code Injection

    		6.3
    CriticalCVE-2023-34137

    SonicWall GMS: Authentication Bypass by Primary Weakness

    also in 2 other products

    		9.8
    CriticalCVE-2019-7478

    SonicWall GMS: SQL Injection

    also in 1 other product

    		9.8
    MediumCVE-2023-34135

    SonicWall GMS: Absolute Path Traversal

    also in 2 other products

    		6.5
    CriticalCVE-2023-34136

    SonicWall GMS: Unrestricted Upload of File with Dangerous Type

    also in 2 other products

    		9.8
    CriticalCVE-2023-34128

    SonicWall GMS: Password in Configuration File

    also in 2 other products

    		9.8
    HighCVE-2023-34126

    SonicWall GMS: Unrestricted Upload of File with Dangerous Type

    also in 2 other products

    		8.8
    HighCVE-2026-18634

    SonicWall GMS: Deserialization of Untrusted Data

    		8.4
    MediumCVE-2023-34134

    SonicWall GMS: Exposure of Sensitive Information to an Unauthorized Actor

    also in 2 other products

    		6.5
    HighCVE-2024-29011

    SonicWall GMS: Use of Hard-coded Password

    		7.5
    HighCVE-2023-34123

    SonicWall GMS: Use of Hard-coded Cryptographic Key

    also in 2 other products

    		7.5
    HighCVE-2026-66154

    SonicWall GMS: Improper Certificate Validation

    		8.3
    HighCVE-2024-29010

    SonicWall GMS: Improper Restriction of XML External Entity Reference

    		7.1
    MediumCVE-2026-66146

    SonicWall GMS: Cross-site Scripting

    		6.1
    CriticalCVE-2023-34130

    SonicWall GMS: Use of a Broken or Risky Cryptographic Algorithm

    also in 2 other products

    		9.8
    MediumCVE-2023-34131

    SonicWall GMS: Exposure of Sensitive Information to an Unauthorized Actor

    also in 2 other products

    		5.3

    News

    All products by SonicWall