Description
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SonicOS | 7.3.3-7015 and older versions, 8.2.2-8015 and older versions | — |
Advisories 2
- NCSC-2026-0471 Kwetsbaarheden verholpen in SonicOS van SonicWall NCSC-NL (Netherlands) · Nov 9, 2026
- WID-SEC-2026-4391 SonicWall SonicOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014 vendor-advisory