CVE-2026-0206 - Vulnerability Details - OpenCVE

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Sonicwall	Sonicos

No data.

No data.

References

Link	Providers
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

History

Thu, 30 Apr 2026 14:15:00 +0000

Type	Values Removed	Values Added
Title		Post‑Authentication Buffer Overflow in SonicOS Causes Firewall Crash

Wed, 29 Apr 2026 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Sonicwall Sonicwall sonicos
Vendors & Products		Sonicwall Sonicwall sonicos

Wed, 29 Apr 2026 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 29 Apr 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
Weaknesses		CWE-121
References		https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

MITRE

Status: PUBLISHED

Assigner: sonicwall

Published: 2026-04-29T16:21:40.001Z

Updated: 2026-04-29T17:00:31.592Z

Reserved: 2025-10-30T10:54:33.982Z

Link: CVE-2026-0206

Vulnrichment

Updated: 2026-04-29T17:00:24.191Z

NVD

Status : Awaiting Analysis

Published: 2026-04-29T17:16:40.633

Modified: 2026-04-30T15:11:12.703

Link: CVE-2026-0206

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0206", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2025-10-30T10:54:33.982Z", "datePublished": "2026-04-29T16:21:40.001Z", "dateUpdated": "2026-04-29T17:00:31.592Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-04-29T16:21:40.001Z"}, "datePublic": "2026-04-29T16:21:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow", "type": "CWE"}]}], "affected": [{"vendor": "SonicWall", "product": "SonicOS", "platforms": ["Linux", "Gen6", "Gen7", "Gen8"], "versions": [{"status": "affected", "version": "6.5.5.1-6n and older versions"}, {"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.1-7013 and older versions"}, {"status": "affected", "version": "8.1.0-8017 and older versions"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall."}]}], "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004", "tags": ["vendor-advisory"]}], "source": {"advisory": "SNWLID-2026-0004", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-29T17:00:27.554889Z", "id": "CVE-2026-0206", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-29T17:00:31.592Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0206", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-29T17:00:27.554889Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-29T17:00:24.191Z"}}], "cna": {"source": {"advisory": "SNWLID-2026-0004", "discovery": "EXTERNAL"}, "affected": [{"vendor": "SonicWall", "product": "SonicOS", "versions": [{"status": "affected", "version": "6.5.5.1-6n and older versions"}, {"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.1-7013 and older versions"}, {"status": "affected", "version": "8.1.0-8017 and older versions"}], "platforms": ["Linux", "Gen6", "Gen7", "Gen8"], "defaultStatus": "unknown"}], "datePublic": "2026-04-29T16:21:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.", "supportingMedia": [{"type": "text/html", "value": "A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-04-29T16:21:40.001Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0206", "state": "PUBLISHED", "dateUpdated": "2026-04-29T17:00:31.592Z", "dateReserved": "2025-10-30T10:54:33.982Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2026-04-29T16:21:40.001Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.2"}