CVE-2026-0399
MEDIUM EPSS 23.9%
Published Feb 24, 20264mo ago · Modified Feb 26, 20264mo ago
4.9 CVSS 3.1
Published Feb 24, 2026 4mo ago
Last Modified Feb 26, 2026 4mo ago
Description
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
23.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-121
Affected Products 34
| Vendor | Product | Version | Range |
|---|---|---|---|
| sonicwall | sonicos | * | <7.3.2-7010 |
| sonicwall | nsa_2700 | * | any |
| sonicwall | nsa_3700 | * | any |
| sonicwall | nsa_4700 | * | any |
| sonicwall | nsa_5700 | * | any |
| sonicwall | nsa_6700 | * | any |
| sonicwall | nssp_10700 | * | any |
| sonicwall | nssp_11700 | * | any |
| sonicwall | nssp_13700 | * | any |
| sonicwall | nssp_15700 | * | any |
| sonicwall | nsv270 | * | any |
| sonicwall | nsv470 | * | any |
| sonicwall | nsv870 | * | any |
| sonicwall | tz270 | * | any |
| sonicwall | tz270w | * | any |
| sonicwall | tz370 | * | any |
| sonicwall | tz370w | * | any |
| sonicwall | tz470 | * | any |
| sonicwall | tz470w | * | any |
| sonicwall | tz570 | * | any |
| sonicwall | tz570p | * | any |
| sonicwall | tz570w | * | any |
| sonicwall | tz670 | * | any |
| sonicwall | sonicos | * | <8.2.0-8009 |
| sonicwall | nsa_2800 | * | any |
| sonicwall | nsa_3800 | * | any |
| sonicwall | nsa_4800 | * | any |
| sonicwall | nsa_5800 | * | any |
| sonicwall | tz280 | * | any |
| sonicwall | tz380 | * | any |
| sonicwall | tz480 | * | any |
| sonicwall | tz580 | * | any |
| sonicwall | tz680 | * | any |
| sonicwall | tz80 | * | any |
References 1
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.