VulnerabilitySANS NewsBites
SonicWall Releases Fixes for Three SonicOS Vulnerabilities
NEOSEC enrichment — no mirror of the original source
On Wednesday, April 29, 2026, SonicWall released firmware updates to address three vulnerabilities in SonicOS. CVE-2026-0204 is a high-severity improper access control vulnerability, CVE-2026-0205 is a medium-severity post-authentication pa
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-0206A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
- CVE-2026-0205A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
- CVE-2026-0204A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
Affected vendors and products
More on SonicWall
Other advisories
- HighCVE-2026-102257SonicWall SMA1000: Mehrere Schwachstellen
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
- HighCVE-2026-102257SonicWall SMA1000: Pfadüberschreitung (Path Traversal)
Other news entries
- Multiples vulnérabilités dans Sonicwall Network Security Manager (15 octobre 2026)NewsCERT-FR (ANSSI)
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under AttackNewsDark Reading
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchNewsThe Hacker News
- Critical SonicWall Vulnerability Exploited Days After DisclosureNewsSecurityWeek
- Max severity SonicWall SMA1000 flaw now exploited in attacksNewsBleepingComputer
- SonicWall and Splunk Patch Critical VulnerabilitiesNewsSecurityWeek
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://www.securityweek.com/
ID