Aller au contenu

Vulnérabilités connues pour SonicWall SonicOS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Moyenne 6 nov. 2026
CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Moyenne 6 nov. 2026
CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Moyenne 6 nov. 2026
CVE-2026-19868 Exploitée SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability 7.5 Élevée 6 nov. 2026
CVE-2026-82308 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service,… 7.5 Élevée 6 nov. 2026
CVE-2026-107154 A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions… 8.8 Élevée 6 nov. 2026
CVE-2026-107155 A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in… 8.8 Élevée 6 nov. 2026
CVE-2026-0516 A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to… 6.5 Moyenne 5 août 2026
CVE-2026-0206 A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a… 4.9 Moyenne 29 avr. 2026
CVE-2026-0205 A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted… 6.8 Moyenne 29 avr. 2026
CVE-2026-0204 A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be… 8.0 Élevée 29 avr. 2026
CVE-2026-3439 A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker… 4.9 Moyenne 4 mars 2026
CVE-2026-0402 A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall 4.9 Moyenne 24 févr. 2026
CVE-2026-0401 A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall 4.9 Moyenne 24 févr. 2026
CVE-2026-0400 A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall 4.9 Moyenne 24 févr. 2026
CVE-2026-0399 Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to… 4.9 Moyenne 24 févr. 2026
CVE-2025-40601 A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to… 7.5 Élevée 20 nov. 2025
CVE-2025-40600 Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote… 9.8 Critique 29 juil. 2025
CVE-2025-32818 A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated… 7.5 Élevée 23 avr. 2025
CVE-2024-12802 SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User… 9.1 Critique 9 janv. 2025
CVE-2024-12806 A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an… 4.9 Moyenne 9 janv. 2025
CVE-2024-12805 A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and… 7.2 Élevée 9 janv. 2025
CVE-2024-12803 A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to… 7.2 Élevée 9 janv. 2025
CVE-2024-40765 An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific… 9.8 Critique 9 janv. 2025
CVE-2024-53706 A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to… 7.8 Élevée 9 janv. 2025

Autres produits SonicWall