16 results · Clear filters · Feed
-
High 7.5
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…
KEV Nov 6, 2026 -
High 7.5
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…
-
High 8.8
A session validation vulnerability has been identified in the SonicOS management interface, which in specific condition…
-
High 8.8
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specif…
-
High 8.0
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be acces…
-
High 7.5
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to c…
-
High 7.5
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticate…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
High 7.5
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause De…
-
High 8.3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allow…
-
High 8.8
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to e…
-
High 8.8
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…