Advisories · Technology

SonicWall SonicOS.

Every CVE that names SonicWall SonicOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0516 CVE record

CVSS 6.5 Medium

SonicWall SonicOS: A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS…
- SonicWall SonicOS
- CWE-644
Not analysed yet 5 Aug 2026
CVE-2026-0206 CVE record

CVSS 4.9 Medium

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 29 Apr 2026
CVE-2026-0205 CVE record

CVSS 6.8 Medium

Path traversal in SonicWall SonicOS
- SonicWall SonicOS
- Path traversal
Not analysed yet 29 Apr 2026
CVE-2026-0204 CVE record

CVSS 8.0 High

Weak authentication in SonicWall SonicOS
- SonicWall SonicOS
- Authentication bypass
Not analysed yet 29 Apr 2026
CVE-2026-3439 CVE record

CVSS 4.9 Medium

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 4 Mar 2026
CVE-2026-0402 CVE record

CVSS 4.9 Medium

Out-of-bounds read in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 24 Feb 2026
CVE-2026-0401 CVE record

CVSS 4.9 Medium

NULL pointer dereference in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 24 Feb 2026
CVE-2026-0400 CVE record

CVSS 4.9 Medium

Uncontrolled format string in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 24 Feb 2026
CVE-2026-0399 CVE record

CVSS 4.9 Medium

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 24 Feb 2026
CVE-2025-40601 CVE record

CVSS 7.5 High

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 20 Nov 2025
CVE-2025-40600 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled format string in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-32818 CVE record

CVSS 7.5 High

NULL pointer dereference in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 23 Apr 2025
CVE-2024-12802 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Mic…
- SonicWall SonicOS
- CWE-305
Not analysed yet 9 Jan 2025
CVE-2024-12806 CVE record

CVSS 4.9 Medium

SonicWall SonicOS: A post-authentication absolute path traversal vulnerability in SonicOS management allows…
- SonicWall SonicOS
- CWE-37
Not analysed yet 9 Jan 2025
CVE-2024-12805 CVE record

CVSS 7.2 High

Uncontrolled format string in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 9 Jan 2025
CVE-2024-12803 CVE record

CVSS 7.2 High

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 9 Jan 2025
CVE-2024-40765 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Integer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 9 Jan 2025
CVE-2024-53706 CVE record

CVSS 7.8 High

Improper privilege management in SonicWall SonicOS
- SonicWall SonicOS
- Privilege escalation
Not analysed yet 9 Jan 2025
CVE-2024-53705 CVE record

CVSS 7.5 High

Server-side request forgery in SonicWall SonicOS
- SonicWall SonicOS
- Server-side request forgery (SSRF)
Not analysed yet 9 Jan 2025
CVE-2024-53704 CVE record

CVSS 8.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Improper authentication in SonicWall SonicOS
- SonicWall SonicOS
- Authentication bypass
Not analysed yet 9 Jan 2025
CVE-2024-40762 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Weak random number generator in SonicWall SonicOS
- SonicWall SonicOS
- Weak cryptography or TLS
Not analysed yet 9 Jan 2025
CVE-2024-40766 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Improper access control in SonicWall SonicOS
- SonicWall SonicOS
- Broken access control
Not analysed yet 23 Aug 2024
CVE-2024-40764 CVE record

CVSS 7.5 High

Heap-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 18 Jul 2024
CVE-2024-29013 CVE record

CVSS 5.3 Medium

Heap-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 20 Jun 2024
CVE-2024-29012 CVE record

CVSS 4.9 Medium

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 20 Jun 2024
CVE-2024-22397 CVE record

CVSS 8.3 High

Cross-site scripting in SonicWall SonicOS
- SonicWall SonicOS
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2024
CVE-2024-22396 CVE record

CVSS 5.3 Medium

Integer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 14 Mar 2024
CVE-2024-22394 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in SonicWall SonicOS
- SonicWall SonicOS
- Authentication bypass
Not analysed yet 8 Feb 2024
CVE-2023-41715 CVE record

CVSS 8.8 High

Improper privilege management in SonicWall SonicOS
- SonicWall SonicOS
- Privilege escalation
Not analysed yet 17 Oct 2023
CVE-2023-41713 CVE record

Hard-coded password in SonicWall SonicOS
- SonicWall SonicOS
- Hard-coded credentials
Not analysed yet 17 Oct 2023
CVE-2023-41712 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-41711 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-39280 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-39279 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-39278 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-39277 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-39276 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 17 Oct 2023
CVE-2023-1101 CVE record

CVSS 8.8 High

Unlimited authentication attempts in SonicWall SonicOS
- SonicWall SonicOS
- Authentication bypass
Not analysed yet 2 Mar 2023
CVE-2023-0656 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 2 Mar 2023
CVE-2022-22278 CVE record

Resource allocation without limits in SonicWall SonicOS
- SonicWall SonicOS
- Denial of service
Not analysed yet 27 Apr 2022
CVE-2022-22277 CVE record

Information disclosure in SonicWall SonicOS
- SonicWall SonicOS
- Information disclosure
Not analysed yet 27 Apr 2022
CVE-2022-22276 CVE record

Information disclosure in SonicWall SonicOS
- SonicWall SonicOS
- Information disclosure
Not analysed yet 27 Apr 2022
CVE-2022-22275 CVE record

Uncontrolled resource consumption in SonicWall SonicOS
- SonicWall SonicOS
- Denial of service
Not analysed yet 27 Apr 2022
CVE-2022-22274 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 25 Mar 2022
CVE-2021-20048 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 7 Jan 2022
CVE-2021-20046 CVE record

Stack-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 7 Jan 2022
CVE-2021-20031 CVE record

Open redirect in SonicWall SonicOS
- SonicWall SonicOS
- Open redirect
Not analysed yet 12 Oct 2021
CVE-2021-20019 CVE record

Information disclosure in SonicWall SonicOS
- SonicWall SonicOS
- Information disclosure
Not analysed yet 23 Jun 2021
CVE-2021-20027 CVE record

Buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 14 Jun 2021
CVE-2020-5143 CVE record

Observable discrepancy in SonicWall SonicOS
- SonicWall SonicOS
- Information disclosure
Not analysed yet 12 Oct 2020
CVE-2020-5142 CVE record

Cross-site scripting in SonicWall SonicOS
- SonicWall SonicOS
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2020
CVE-2020-5141 CVE record

SonicWall SonicOS: A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force…
- SonicWall SonicOS
- CWE-799
Not analysed yet 12 Oct 2020
CVE-2020-5140 CVE record

Out-of-bounds read in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5139 CVE record

Release of invalid pointer in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5138 CVE record

Heap-based buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5137 CVE record

Buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5136 CVE record

Buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5135 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5134 CVE record

Out-of-bounds read in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020
CVE-2020-5133 CVE record

Buffer overflow in SonicWall SonicOS
- SonicWall SonicOS
- Memory corruption
Not analysed yet 12 Oct 2020