CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB Burp SuiteによってSonicOS 7.0 SonicWall NSAデバイスの複数の場所で発見された反射型XSS。...

CVE-2022-22274_CVE-2023-0656

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 2022年3月24日、SonicWallは以下の詳細を含む勧告を公開しました。 SonicOSのHTTPリクエストを介したスタックベースのバッファオーバーフローの脆弱性により、リモートの未認証攻撃者がサービス拒否（DoS）を引き起こしたり、ファイアウォールでのコード実行に至る可能性があります。 注：この脆弱性は「Web管理」インターフェースにのみ影響し、SonicOS SSLVPNインターフェースには影響しません。 2023年3月2日、SonicWallは別の同様の勧告を公開しました。...

CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

EUVD-2026-53334

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

CVE-2026-0516

A vulnerability in SonicOS involving the improper neutralization of HTTP Headers for Scripting Syntax allows a remote attacker to manipulate the Host header . This could lead to the redirection of firewall management users to arbitrary web domains. While multiple sources confirm the existence of ...

CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

SonicOS Improper Neutralization of HTTP Headers Vulnerability

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains. CVE: CVE-2026-0516 Last updated: Aug. 11, 2026, 1:23 p.m...

CVE-2026-0516: Improper Neutralization of HTTP Headers for Scripting Syntax

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

CVE-2026-0205

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services...

CVE-2026-0206

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...

CVE-2026-0204

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions...

The vulnerability of the SonicOS operating system, related to insufficient handling of format lines, allows a hacker to trigger a service failure.

The vulnerability of the SonicOS operating system is related to insufficient handling of format lines. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

VulnCheck KEV: CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

VulnCheck KEV: CVE-2025-32818

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service DoS condition...

SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2026-0004)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities: - An improper access control vulnerability in the SonicOS management interface allows certain management interface functions to be accessible under...

CVE-2026-0205

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services...

CVE-2026-0204

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions...

CVE-2026-0206

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall...