SonicOS at a glance
3 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 7 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 1 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 4 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 1 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 1 | 1 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 9 | 3 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 8.8
Kwetsbaarheden verholpen in SonicOS van SonicWall
SonicWall heeft zeven kwetsbaarheden verholpen in SonicOS voor Gen7- en Gen8-firewalls.
-
High max 8.8
SonicWall SonicOS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall SonicOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
-
Low max 6.5WID-SEC-2026-2671 1 CVE
SonicWall SonicOS: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SonicWall SonicOS ausnutzen, um Informationen offenzulegen.
-
High max 8.0WID-SEC-2026-1313 3 CVEs
SonicWall SonicOS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall SonicOS ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.
-
Medium max 4.9
SonicWall SonicOS: Mehrere Schwachstellen ermöglichen Denial of Service
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SonicWall SonicOS ausnutzen, um einen Denial of Service Angriff durchzuführen.
first Feb 23, 2026
75 results · Feed
-
Medium 5.1
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions c…
-
Medium 5.9
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
-
Medium 5.9
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authenticatio…
-
High 7.5
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…
KEV Nov 6, 2026 -
High 7.5
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…
-
High 8.8
A session validation vulnerability has been identified in the SonicOS management interface, which in specific condition…
-
High 8.8
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specif…
-
Medium 6.5
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker t…
-
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewa…
-
Medium 6.8
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted se…
-
High 8.0
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be acces…
-
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacke…
-
Medium 4.9
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to imp…
-
High 7.5
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to c…
-
Critical 9.8
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…
-
High 7.5
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticate…
-
Critical 9.1
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal…
-
Medium 4.9
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an a…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
Critical 9.8
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
Critical 9.8
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generato…
-
Critical 9.3
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…
KEV Sep 9, 2024 -
High 7.5
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause De…
-
Medium 5.3
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial…
-
Medium 4.9
Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause D…
-
High 8.3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allow…
-
Medium 5.3
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
Critical 9.8
An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific co…
-
High 8.8
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to e…
-
Unscored —
SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.
-
Unscored —
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads …
-
Unscored —
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lea…
-
Unscored —
SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoi…