How do I report a SonicWall security vulnerability?

To report a security vulnerability of a SonicWall product please contact the SonicWall Product Security Incident Response Team (PSIRT) at https://psirt.global.sonicwall.com/report-vuln. PSIRT provides the ability to securely report vulnerabilities. Either download the PGP key to send information via email or complete the online secure web form.

The SonicWall Product Security Incident Response Team (PSIRT) is responsible for managing SonicWall security incidents (receipt, investigation, and public reporting of information about security vulnerabilities and issues related to SonicWall products or a third-party software component that is used in a SonicWall product).

A security vulnerability is a flaw or weakness in the design, implementation, operation or management or a product or service that could be exploited to violate the system's security policy. To protect businesses and organizations worldwide, it is critical that the broader community of IT and security professionals report potential vulnerabilities as soon as they are recognized. This allows industry experts to take appropriate action to resolve any vulnerability that is discovered. If you are aware of a potential security vulnerability with any SonicWall Security product or service, we encourage you to contact us immediately using the Security Vulnerability Submission Form. All reported vulnerabilities are investigated by the SonicWall Security PSIRT team. Throughout the investigation process, SonicWall Security makes every effort to work collaboratively with the incident reporter to investigate the vulnerability, gather required technical information, and to determine an appropriate action plan.

To learn more about PSIRT please visit https://psirt.global.sonicwall.com

Security Advisories

https://psirt.global.sonicwall.com/vuln-list

How to report a vulnerability

https://psirt.global.sonicwall.com/report-vuln

Scope of Responsibility

SonicWall products https://www.sonicwall.com/en-us/products