ACTIVELY EXPLOITED
CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability
| Vendor | SonicWall |
|---|---|
| Product | SMA100 |
| Actively exploited | Yes |
| Added to CISA KEV | 28 Mar 2022 |
| CISA federal deadline | 18 Apr 2022 |
| Weakness (CWE) | CWE-22 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
SOURCES
Other SonicWall flaws
- CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability
- CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.