Vulnerabilities

TI-2026-00264 CVE-2026-0402 · GHSA-pr9m-7cjw-258w

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

LOW 23

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00398 Published 2026-02-24 No fix listed CWE-125

TI-2026-00263 CVE-2026-0401 · GHSA-xqx8-2c6c-9g3g

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

LOW 23

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00398 Published 2026-02-24 No fix listed CWE-476

TI-2026-00262 CVE-2026-0400 · GHSA-3q93-28v9-5x6v

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.

LOW 23

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00493 Published 2026-02-24 No fix listed CWE-134

TI-2026-00261 CVE-2026-0399 · GHSA-pq5g-x5q3-3g25

Stack-based buffer overflow in SonicWall SonicOS

LOW 23

Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00374 Published 2026-02-24 No fix listed CWE-121

Vulnerabilities

Filters

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.

Stack-based buffer overflow in SonicWall SonicOS