CVE-2026-0400
MEDIUM EPSS 34.0%
Published Feb 24, 20264mo ago · Modified Feb 26, 20264mo ago
4.9 CVSS 3.1
Published Feb 24, 2026 4mo ago
Last Modified Feb 26, 2026 4mo ago
Description
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
34.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-134
Affected Products 34
| Vendor | Product | Version | Range |
|---|---|---|---|
| sonicwall | sonicos | * | <7.3.2-7010 |
| sonicwall | nsa_2700 | * | any |
| sonicwall | nsa_3700 | * | any |
| sonicwall | nsa_4700 | * | any |
| sonicwall | nsa_5700 | * | any |
| sonicwall | nsa_6700 | * | any |
| sonicwall | nssp_10700 | * | any |
| sonicwall | nssp_11700 | * | any |
| sonicwall | nssp_13700 | * | any |
| sonicwall | nssp_15700 | * | any |
| sonicwall | nsv270 | * | any |
| sonicwall | nsv470 | * | any |
| sonicwall | nsv870 | * | any |
| sonicwall | tz270 | * | any |
| sonicwall | tz270w | * | any |
| sonicwall | tz370 | * | any |
| sonicwall | tz370w | * | any |
| sonicwall | tz470 | * | any |
| sonicwall | tz470w | * | any |
| sonicwall | tz570 | * | any |
| sonicwall | tz570p | * | any |
| sonicwall | tz570w | * | any |
| sonicwall | tz670 | * | any |
| sonicwall | sonicos | * | <8.2.0-8009 |
| sonicwall | nsa_2800 | * | any |
| sonicwall | nsa_3800 | * | any |
| sonicwall | nsa_4800 | * | any |
| sonicwall | nsa_5800 | * | any |
| sonicwall | tz280 | * | any |
| sonicwall | tz380 | * | any |
| sonicwall | tz480 | * | any |
| sonicwall | tz580 | * | any |
| sonicwall | tz680 | * | any |
| sonicwall | tz80 | * | any |
References 1
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.