Lucene search
+L

15693 matches found

CVE
CVE
•added 2026/02/24 2:54 p.m.•86 views

CVE-2026-0400

A post-authentication Format String vulnerability exists in the SonicOS operating system used by SonicWall firewall devices. The root cause is the insufficient handling of format lines , which allows a remote attacker to trigger a service failure and crash the firewall . While the specific affect...

4.9CVSS5.9AI score0.00441EPSS
SaveExploits0References1Affected Software1
SonicWall
SonicWall
•added 2026/02/24 11:46 a.m.•123 views

SonicOS multiple post-authentication vulnerabilities

1 CVE-2026-0399 - Multiple SonicOS post-authentication Stack-based Buffer Overflow vulnerabilitiesMultiple post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.CVSS Score: 4.9 CVSS Vector:...

4.9CVSS5.9AI score0.00441EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/24 7:43 a.m.•18 views

CVE-2026-21863

A flaw was found in Valkey, a distributed key-value database. A malicious actor with access to the Valkey clusterbus port can exploit an input validation vulnerability by sending a specially crafted invalid clusterbus packet. This lack of validation for clusterbus ping extension packets can lead ...

7.5CVSS7AI score0.00793EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/02/24 6:57 a.m.•16 views

CVE-2026-27623

A flaw was found in Valkey. A malicious actor with network access to Valkey can cause the system to shut down by sending a specially crafted request. This occurs because the system does not properly reset its networking state after processing an empty request, leading to an assertion failure. Thi...

7.5CVSS7AI score0.00669EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/02/24 3:26 a.m.•17 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference when processing a malformed PFCP SessionReportRequest in the process when ReportType.USAR is set to 1 and the UsageReport omits the mandatory URRID sub-IE. An attacker can cause the service to panic and terminat...

8.7CVSS5.7AI score0.00513EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/02/24 3:26 a.m.•9 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the PFCP SessionReportRequest process when ReportType.USAR is set to 1 and the UsageReport omits the mandatory URRID sub-IE. An attacker can cause the service to crash and terminate by sending a specially...

8.7CVSS5.7AI score0.00513EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/02/24 12:15 a.m.•42 views

CVE-2026-26025 free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE 

free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP UDP/8805 interface. No known upstrea...

8.7CVSS0.00513EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/02/24 12:10 a.m.•21 views

EUVD-2026-7466

free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminates. This is triggered by a malformed PFCP...

8.7CVSS5.5AI score0.00513EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•37 views

PT-2026-21746

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication format string issue exists in SonicOS. This can allow a remote attacker to cause a firewall to crash. Recommendations At the moment, there is no information about a newe...

4.9CVSS5.3AI score0.00441EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•24 views

PT-2026-21747

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication NULL Pointer Dereference issue exists in SonicOS. This can allow a remote attacker to crash a firewall. Recommendations At the moment, there is no information about a...

4.9CVSS5.3AI score0.00356EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•27 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is an operating system developed by the American company SonicWALL, specifically for use with SonicWall firewall devices. There is a security vulnerability in SonicWALL SonicOS, which stems from a format string vulnerability, potentially causing the firewall to crash...

4.9CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•7 views

CVE-2026-0401: NULL Pointer Dereference

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall...

4.9CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•7 views

CVE-2026-0402: Out-of-bounds Read

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall...

4.9CVSS5.9AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•25 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is an operating system developed by the American company SonicWALL, specifically for use with SonicWall firewall devices. There is a security vulnerability in SonicWALL SonicOS, which stems from a null pointer dereferencing and could lead to the failure of the firewall...

4.9CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•23 views

PT-2026-21748

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication Out-of-bounds Read issue exists in SonicOS. This can allow a remote attacker to cause a firewall to crash. Recommendations At the moment, there is no information about a...

4.9CVSS5.3AI score0.00356EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•18 views

The vulnerability of the Internet Control Server’s network firewall, related to the failure to implement data cleaning at the management level, allows attackers to execute arbitrary codes.

The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•16 views

The vulnerability of the Internet Control Server’s network firewall, related to the bypassing of authentication due to a fundamental error, allows attackers to escalate their privileges.

The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability allows a remote attacker to gain increased privileges...

10CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•20 views

The vulnerability of the Internet Control Server’s network firewall, related to the bypassing of authentication due to a fundamental error, allows intruders to gain unauthorized access to protected information.

The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.8AI score
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•16 views

The vulnerability of the Internet Control Server’s network firewall, related to the failure to implement data cleaning at the management level, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.1AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•30 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is an operating system developed by the American company SonicWALL, specifically for use with SonicWall firewall devices. There is a security vulnerability in SonicWALL SonicOS, which stems from excessive read operations and could potentially cause the firewall to crash...

4.9CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Rows per page
Query Builder