EUVD-2026-26254Severity by source
AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Adjacent management-interface access (AV:A) with no auth (PR:N) but required admin interaction (UI:R); impact retained as high per vendor vector, though I/A ratings warrant advisory confirmation.
Primary rating from NVD.
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
AnalysisAI
Improper access control in SonicWall SonicOS lets an adjacent-network attacker reach certain management interface functions that should be restricted, exposing sensitive information (tagged Information Disclosure) with high confidentiality, integrity, and availability impact per CVSS 8.0. The flaw is vendor-reported by SonicWall PSIRT (SNWLID-2026-0004) and affects the firewall/appliance operating system across the 6.5.5.x, 7.0.x, 7.3.x, and 8.1.x branches. There is no public exploit identified at time of analysis, and EPSS is negligible (0.01%).
Technical ContextAI
SonicOS is the embedded operating system running on SonicWall firewall and security appliances, which expose a web-based management interface for administration. The root cause is classified as CWE-1390 (Weak Authentication): the access control mechanism guarding management interface functions fails to properly enforce authorization under specific conditions, allowing functions to be reached that should require established authentication or session context. The single CPE (cpe:2.3:a:sonicwall:sonicos:*) confirms the affected component is SonicOS itself rather than a bundled third-party library, and the CVSS AV:A metric places the exposure on the adjacent (management/LAN) network rather than the open Internet.
RemediationAI
Upgrade SonicOS to a fixed release newer than the listed vulnerable builds on your branch - i.e., beyond 6.5.5.1-6n, 7.0.1-5169, 7.3.1-7013, or 8.1.0-8017 - as directed by the SonicWall advisory at https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004; the input does not specify an exact fixed build, so confirm the target patched version directly from that advisory before deploying. As compensating controls until patched, restrict management interface access to a dedicated, trusted management VLAN or specific admin source IPs so adjacent-network reachability is minimized (trade-off: administrators must connect from the permitted segment/jump host), and disable management on untrusted interfaces such as WAN or user LAN zones (trade-off: remote admins lose direct access and must use VPN). Because exploitation requires user interaction, also caution administrators against following untrusted links to the appliance's management interface.
SonicWall SonicOS SSLVPN contains an authentication bypass vulnerability allowing remote attackers to bypass authenticat
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). Rated critical severity (CVSS 9.8), this v
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. Rated high severity (CVSS 7.5), this vulne
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially lea
An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific con
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially exe
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). Rated critical seve
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). Rated critical severity (CVSS
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. Rated critical severity (CVSS 9.8), this vul
Same weakness CWE-1390 – Weak Authentication
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today