| CVE-2026-19703 |
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…
|
5.1
Medium
|
Nov 6, 2026 |
| CVE-2026-77709 |
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…
|
5.9
Medium
|
Nov 6, 2026 |
| CVE-2026-77708 |
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
|
5.9
Medium
|
Nov 6, 2026 |
| CVE-2026-19868 |
Exploited
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
|
7.5
High
|
Nov 6, 2026 |
| CVE-2026-82308 |
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service,…
|
7.5
High
|
Nov 6, 2026 |
| CVE-2026-107154 |
A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions…
|
8.8
High
|
Nov 6, 2026 |
| CVE-2026-107155 |
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in…
|
8.8
High
|
Nov 6, 2026 |
| CVE-2026-0516 |
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to…
|
6.5
Medium
|
Aug 5, 2026 |
| CVE-2026-0206 |
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a…
|
4.9
Medium
|
Apr 29, 2026 |
| CVE-2026-0205 |
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted…
|
6.8
Medium
|
Apr 29, 2026 |
| CVE-2026-0204 |
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be…
|
8.0
High
|
Apr 29, 2026 |
| CVE-2026-3439 |
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker…
|
4.9
Medium
|
Mar 4, 2026 |
| CVE-2026-0402 |
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall
|
4.9
Medium
|
Feb 24, 2026 |
| CVE-2026-0401 |
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall
|
4.9
Medium
|
Feb 24, 2026 |
| CVE-2026-0400 |
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall
|
4.9
Medium
|
Feb 24, 2026 |
| CVE-2026-0399 |
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to…
|
4.9
Medium
|
Feb 24, 2026 |
| CVE-2025-40601 |
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to…
|
7.5
High
|
Nov 20, 2025 |
| CVE-2025-40600 |
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote…
|
9.8
Critical
|
Jul 29, 2025 |
| CVE-2025-32818 |
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated…
|
7.5
High
|
Apr 23, 2025 |
| CVE-2024-12802 |
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…
|
9.1
Critical
|
Jan 9, 2025 |
| CVE-2024-12806 |
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an…
|
4.9
Medium
|
Jan 9, 2025 |
| CVE-2024-12805 |
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and…
|
7.2
High
|
Jan 9, 2025 |
| CVE-2024-12803 |
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to…
|
7.2
High
|
Jan 9, 2025 |
| CVE-2024-40765 |
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific…
|
9.8
Critical
|
Jan 9, 2025 |
| CVE-2024-53706 |
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to…
|
7.8
High
|
Jan 9, 2025 |