Known vulnerabilities in SonicOS 7.1.2-7019

Vendor: SonicWall
Software: SonicOS
Version: 7.1.2-7019
Software CPE: cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SonicOS version 7.1.2-7019 SonicOS 7.1.2-7019 is affected by 10 vulnerabilities: 1 high, 3 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141057 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2026-0516		 CWE-644 Low
No
No
 8.2.2-8015 06.08.2026 SB2026080638
#VU128470 - Weak Authentication
CVE-2026-0204		 CWE-1390 High
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-0205		 CWE-22 Medium
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU128472 - Stack-based buffer overflow
CVE-2026-0206		 CWE-121 Low
No
No
 6.5.5.2-28n, 7.3.2-7010, 8.2.0-8009 29.04.2026 SB2026042987
#VU123199 - Out-of-bounds read
CVE-2026-0402		 CWE-125 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123198 - NULL Pointer Dereference
CVE-2026-0401		 CWE-476 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123197 - Use of Externally-Controlled Format String
CVE-2026-0400		 CWE-134 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU123196 - Stack-based buffer overflow
CVE-2026-0399		 CWE-121 Low
No
No
 7.3.2-7010, 8.2.0-8009 24.02.2026 SB2026022447
#VU118630 - Stack-based buffer overflow
CVE-2025-40601		 CWE-121 Medium
No
No
 7.3.1-7013, 8.0.3-8011 20.11.2025 SB2025112001
#VU107886 - NULL Pointer Dereference
CVE-2025-32818		 CWE-476 Medium
No
No
 7.2.0-7015, 8.0.1-8017 23.04.2025 SB2025042343