SonicWall

sonicwall.com

SonicWall declares 12 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services and 360insights Platform. No published changes since we first read it on Sep 27, 2026.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

12 third parties.

NamePurposeLocationListed since
360Insights MDF Payment Processing
Avanan Hosting
Avertech Marketing tool
AWS Hosting
CallidusCloud Surveys
Cybersource Transaction processing
Datamotion Hosting
Oracle Eloqua Marketing Tool
Perimeter81 Cloud Edge
Rockwell Information Services Training & Education
Safesforce CRM
Trolley Rebate Payment Processing

Web TechnologiesCSV · Atom

SonicWall's homepage made 209 requests to 31 domains, and 20 services controlled by another company.

Analytics (8): Google Cloud, Hotjar, Dun & Bradstreet, Meta, Demandbase, LinkedIn, ZoomInfo, CloudflareAdvertising (4): Microsoft; reviewed: Index Exchange Inc.; usually detected as Advertising: Magnite, Inc., PubMaticMarketing automation (1): HubSpotLive chat (1): Qualified.com, Inc.Cookie compliance (1): TrustArcCDN (1): jQueryOther (4): reviewed as CMS: Contentstack; reviewed as Customer data platform: LiveRamp; usually detected as Issue trackers: Sentry; RUM: SolarWinds

20 third parties by category: Analytics 8Advertising 4Marketing automation 1Live chat 1Cookie compliance 1CDN 1Other 4

Third parties 20 · 95 requests
Qualified.com, Inc. Qualified 15% of the page's requests 32
Google Cloud Google Analytics Google Tag Manager reCAPTCHA 6% of the page's requests 12
TrustArc TrustArc 3% of the page's requests 7
Hotjar Hotjar 2% of the page's requests 5
Contentstack contentstack.io 2% of the page's requests 4
Dun & Bradstreet D&B Visitor Intelligence 2% of the page's requests 4
HubSpot HubSpot 2% of the page's requests 4
Meta Facebook Pixel 2.9.439 2% of the page's requests 4
Demandbase Demandbase 11.1.11 1% of the page's requests 3
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
LiveRamp rlcdn.com 1% of the page's requests 3
Microsoft Microsoft Advertising 1% of the page's requests 3
Magnite, Inc. rubiconproject.com, tremorhub.com <1% of the page's requests 2
SolarWinds Pingdom RUM <1% of the page's requests 2
ZoomInfo Zoominfo <1% of the page's requests 2
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
Index Exchange Inc. casalemedia.com <1% of the page's requests 1
PubMatic pubmatic.com <1% of the page's requests 1
Sentry sentry.io <1% of the page's requests 1
jQuery jQuery 3.6.0 jQuery CDN <1% of the page's requests 1
First party 1 · 114 requests
SonicWall Contentsquare HSTS Imperva Next.js 16.4.3 Next.js App Router Open Graph Priority Hints Radix UI React Sentry Turbopack Vercel Webpack core-js 3.32.2 55% of the page's requests 114

16 tracked companies loaded by the homepage are not in SonicWall's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV · Atom

Certified

Certifications as SonicWall's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV · Atom

What public security catalogs list for SonicWall, in their words.

Known exploited vulnerabilities

20 vulnerabilities in SonicWall's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2026-19868SonicOS SSLVPNSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
CVE-2026-83548SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-83549SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability
CVE-2026-15409SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability used by ransomware
CVE-2026-15410SMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection Vulnerability used by ransomware
CVE-2025-40602SMA1000 applianceSonicWall SMA1000 Missing Authorization Vulnerability
CVE-2023-44221SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2021-20035SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE-2024-53704SonicOSSonicWall SonicOS SSLVPN Improper Authentication Vulnerability used by ransomware
CVE-2025-23006SMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization Vulnerability used by ransomware
10 more
CVEProductVulnerabilityListed
CVE-2024-40766SonicOSSonicWall SonicOS Improper Access Control Vulnerability used by ransomware
CVE-2019-7483SMA100SonicWall SMA100 Directory Traversal Vulnerability
CVE-2021-20028Secure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability used by ransomware
CVE-2020-5135SonicOSSonicWall SonicOS Buffer Overflow Vulnerability used by ransomware
CVE-2021-20038SMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability used by ransomware
CVE-2019-7481SMA100SonicWall SMA100 SQL Injection Vulnerability used by ransomware
CVE-2021-20016SSLVPN SMA100SonicWall SSLVPN SMA100 SQL Injection Vulnerability used by ransomware
CVE-2021-20021SonicWall Email SecuritySonicWall Email Security Improper Privilege Management Vulnerability used by ransomware
CVE-2021-20022SonicWall Email SecuritySonicWall Email Security Unrestricted Upload of File Vulnerability used by ransomware
CVE-2021-20023SonicWall Email SecuritySonicWall Email Security Path Traversal Vulnerability used by ransomware

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

ChangesCSV · Atom

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for SonicWall's site

SonicWall transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sonicwall"><img src="https://thirdpartyindex.com/badge/sonicwall.svg" alt="SonicWall transparency rating on Third Party Index" height="20"></a>
[![SonicWall transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sonicwall.svg)](https://thirdpartyindex.com/vendors/sonicwall)