CVE-2022-22274_CVE-2023-0656

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 On March 24, 2022, SonicWall released an advisory with the following details: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in...

CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB Reflected XSS found by Burp Suite in several locations on SonicOS 7.0 Sonicwall NSA device...

SonicWall SonicOS 7.x < 7.3.4-7013 / 8.x < 8.2.3-8015 Multiple Vulnerabilities (SNWLID-2026-0014)

According to its self-reported version, the remote SonicWall firewall is running SonicOS 7.x prior to 7.3.4-7013, or 8.x prior to 8.2.3-8015. It is, therefore, affected by multiple vulnerabilities: - A permissive cross-domain policy vulnerability has been identified in the SonicOS management...

SonicWall SonicOS Improper Neutralization of HTTP Headers Vulnerability (SNWLID-2026-0009)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by an improper neutralization of HTTP headers for scripting syntax vulnerability: - A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could...

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities KEV catalog, following reports that it said may have been exploited in real-world attacks. The vulnerability, tracked as...

CVE-2026-77708

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-82308

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-19703

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

CVE-2026-19868

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...

CVE-2026-107154

A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations...

CVE-2026-107155

A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations...

CVE-2026-19703

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

EUVD-2026-118432

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

CVE-2026-19703

A weak password hashing vulnerability exists in SonicOS virtual appliances . Under specific conditions, an attacker with existing local access could exploit this weakness (associated with CWE-798 and CWE-916 ) to disclose a platform credential. This credential grants access to a limited subset of...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability exists in the SonicOS TACACS+ authentication client . Under specific conditions, a remote unauthenticated attacker could exploit this flaw to cause an application-level denial of service . This vulnerability is identified as CWE-122 an...

EUVD-2026-118431

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77709

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...

CVE-2026-77708

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...