Sonicwall Sonicos vulnerabilities

• sonicwall sonicos A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in... CVE-2026-19703 5.1 MediumNovember 6, 2026
• sonicwall sonicos A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS... CVE-2026-77709 5.9 MediumNovember 6, 2026
• sonicwall sonicos A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS... CVE-2026-77708 5.9 MediumNovember 6, 2026
• sonicwall sonicos, sonicos sslvpn +1 more An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid... CVE-2026-19868 In KEVPublic exploit 7.5 HighNovember 6, 2026
• sonicwall sonicos A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS... CVE-2026-82308 7.5 HighNovember 6, 2026
• sonicwall sonicos A session validation vulnerability has been identified in the SonicOS management interface, which... CVE-2026-107154 8.8 HighNovember 6, 2026
• sonicwall sonicos A permissive cross-domain policy vulnerability has been identified in the SonicOS management... CVE-2026-107155 8.8 HighNovember 6, 2026
• sonicwall sonicos A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could... CVE-2026-0516 6.5 MediumAugust 5, 2026
• sonicwall sonicos A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote... CVE-2026-0206 4.9 MediumApril 29, 2026
• sonicwall sonicos A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with... CVE-2026-0205 6.8 MediumApril 29, 2026
• sonicwall sonicos A vulnerability in the access control mechanism of SonicOS may allow certain management interface... CVE-2026-0204 8.0 HighApril 29, 2026
• sonicwall sonicos A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling... CVE-2026-3439 4.9 MediumMarch 4, 2026
• sonicwall sonicos A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to... CVE-2026-0402 4.9 MediumFebruary 24, 2026
• sonicwall sonicos A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker... CVE-2026-0401 4.9 MediumFebruary 24, 2026
• sonicwall sonicos A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a... CVE-2026-0400 4.9 MediumFebruary 24, 2026
• sonicwall sonicos Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS... CVE-2026-0399 4.9 MediumFebruary 24, 2026
• sonicwall sonicos A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote... CVE-2025-40601 7.5 HighNovember 20, 2025
• sonicwall sonicos Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows... CVE-2025-40600 9.8 CriticalJuly 29, 2025
• sonicwall sonicos A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a... CVE-2025-32818 7.5 HighApril 23, 2025
• sonicwall sonicos SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling... CVE-2024-12802 9.1 CriticalJanuary 9, 2025
• sonicwall sonicos A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote... CVE-2024-12806 4.9 MediumJanuary 9, 2025
• sonicwall sonicos A post-authentication format string vulnerability in SonicOS management allows a remote attacker... CVE-2024-12805 7.2 HighJanuary 9, 2025
• sonicwall sonicos A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a... CVE-2024-12803 7.2 HighJanuary 9, 2025
• sonicwall sonicos An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker... CVE-2024-40765 9.8 CriticalJanuary 9, 2025
• sonicwall sonicos A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low... CVE-2024-53706 7.8 HighJanuary 9, 2025
• sonicwall sonicos A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a... CVE-2024-53705 7.5 HighJanuary 9, 2025
• sonicwall sonicos An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote... CVE-2024-53704 In KEVPublic exploit EPSS 95.3% 9.8 CriticalJanuary 9, 2025
• sonicwall sonicos Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN... CVE-2024-40762 9.8 CriticalJanuary 9, 2025
• sonicwall sonicos An improper access control vulnerability has been identified in the SonicWall SonicOS management... CVE-2024-40766 In KEV EPSS 18.4% 9.8 CriticalAugust 23, 2024
• sonicwall sonicos Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated... CVE-2024-40764 7.5 HighJuly 18, 2024
• ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 more RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVE-2024-3596 Public exploitFix available EPSS 14.9% 9.0 CriticalJuly 9, 2024
• sonicwall sonicos Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote... CVE-2024-29013 6.5 MediumJune 20, 2024
• sonicwall sonicos Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated... CVE-2024-29012 7.5 HighJune 20, 2024
• sonicwall sonicos Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the... CVE-2024-22397 8.3 HighMarch 14, 2024
• sonicwall sonicos An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker... CVE-2024-22396 5.3 MediumMarch 14, 2024
• sonicwall sonicos An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature... CVE-2024-22394 9.8 CriticalFebruary 8, 2024
• sonicwall sonicos SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN... CVE-2023-41715 8.8 HighOctober 17, 2023
• sonicwall sonicos SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. CVE-2023-41713 7.5 HighOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs... CVE-2023-41712 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs... CVE-2023-41711 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml,... CVE-2023-39280 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData... CVE-2023-39279 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow... CVE-2023-39278 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and... CVE-2023-39277 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList... CVE-2023-39276 6.5 MediumOctober 17, 2023
• sonicwall sonicos SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an... CVE-2023-1101 8.8 HighMarch 2, 2023
• sonicwall sonicos A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated... CVE-2023-0656 Public exploit EPSS 41.3% 7.5 HighMarch 2, 2023
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP... CVE-2022-22278 7.5 HighApril 27, 2022
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive... CVE-2022-22277 5.3 MediumApril 27, 2022
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an... CVE-2022-22276 5.3 MediumApril 27, 2022
• Show olderLoading…