Summary
Ein Angreifer kann mehrere Schwachstellen in SonicWall SonicOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Product
SonicOS ist das Betriebssystem von SonicWall Firewall-Produkten.
Vulnerabilities 7
-
High 7.5
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…
KEV Nov 6, 2026 -
High 8.8
A session validation vulnerability has been identified in the SonicOS management interface, which in specific condition…
-
High 8.8
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specif…
-
High 7.5
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…
-
Medium 5.9
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authenticatio…
-
Medium 5.9
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
-
Medium 5.1
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions c…
Revision history
-
#1
Initiale Fassung
References
-
SonicWall Security Advisory SNWLID-2026-0014 vom 2026-11-08
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014
-
CISA KEV: CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability vom 2026-11-08
https://www.cisa.gov/known-exploited-vulnerabilities-catalog