Read the docs

Sonos

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Sonos records in CISA KEV

No Sonos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
S2 9 records MEDIUM S1 8 records MEDIUM One Firmware 5 records HIGH Era 100 Firmware 4 records MEDIUM Era 300 Firmware 2 records MEDIUM Sonos Firmware 1 record MEDIUM

Records

2 records in Era 300 Firmware · all components

TI-2026-03597 CVE-2026-4149 · GHSA-8v6v-j22p-w63g

Memory corruption in Sonos Era 300

Priority MEDIUM 51

Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01013 Published 2026-04-11 No fix listed CWE-119
TI-2025-00890 CVE-2025-1051 · GHSA-jv3c-qh2g-5f2r

Heap-based buffer overflow in Sonos Era 300

Priority MEDIUM 40

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00387 Published 2025-06-02 No fix listed CWE-122
Open these records in search →