Known vulnerabilities in SonicOS

Vendor: SonicWall
Software: SonicOS
Software CPE: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 58
Public exploits: 5
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SonicOS SonicOS is affected by 58 known vulnerabilities: 1 critical, 13 high, 30 medium, 14 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141057 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2026-0516		 CWE-644 Low
No
No
 8.2.2-8015 06.08.2026 SB2026080638
#VU128470 - Weak Authentication
CVE-2026-0204		 CWE-1390 High
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0205		 CWE-22 Medium
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128472 - Stack-based buffer overflow
CVE-2026-0206		 CWE-121 Low
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU123199 - Out-of-bounds read
CVE-2026-0402		 CWE-125 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123198 - NULL Pointer Dereference
CVE-2026-0401		 CWE-476 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123197 - Use of Externally-Controlled Format String
CVE-2026-0400		 CWE-134 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123196 - Stack-based buffer overflow
CVE-2026-0399		 CWE-121 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU118630 - Stack-based buffer overflow
CVE-2025-40601		 CWE-121 Medium
No
No
 7.3.1-7013, 8.0.3-8011 20.11.2025 SB2025112001
#VU113510 - Use of Externally-Controlled Format String
CVE-2025-40600		 CWE-134 Medium
No
No
 7.3.0-7012 30.07.2025 SB2025073051
#VU107886 - NULL Pointer Dereference
CVE-2025-32818		 CWE-476 Medium
No
No
 7.2.0-7015, 8.0.1-8017 23.04.2025 SB2025042343
#VU102459 - Integer overflow
CVE-2024-40765		 CWE-190 Medium
No
No
 6.5.4.v-21s-RC2457, 7.0.1-5165, 7.1.3-7015 08.01.2025 SB2025010843
#VU102458 - Authentication Bypass by Primary Weakness
CVE-2024-12802		 CWE-305 High
No
Exploited
 6.5.4.4-44v-21-2472, 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102456 - Improper Privilege Management
CVE-2024-53706		 CWE-269 Low
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102455 - Server-Side Request Forgery (SSRF)
CVE-2024-53705		 CWE-918 Medium
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102454 - Improper Authentication
CVE-2024-53704		 CWE-287 Medium
Available
Exploited
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102453 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2024-40762		 CWE-338 Medium
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102452 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12806		 CWE-22 Low
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102451 - Use of Externally-Controlled Format String
CVE-2024-12805		 CWE-134 Low
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843
#VU102450 - Stack-based buffer overflow
CVE-2024-12803		 CWE-121 Low
No
No
 6.5.5.1-6n, 7.0.1-5165, 7.1.3-7015, 8.0.0-8037 08.01.2025 SB2025010843


Showing elements 1 - 20 out of 58