Sonicwall Nsa_2800
9 CVEs affecting Sonicwall Nsa_2800. Latest disclosed: 2026-04-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-0204 | High | 8.0 | 2026-04-29 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. |
CVE-2025-40601 | High | 7.5 | 2025-11-20 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which coul… |
CVE-2026-0205 | Medium | 6.8 | 2026-04-29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. |
CVE-2026-0206 | Medium | 4.9 | 2026-04-29 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. |
CVE-2026-3439 | Medium | 4.9 | 2026-03-04 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. |
CVE-2026-0402 | Medium | 4.9 | 2026-02-24 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. |
CVE-2026-0401 | Medium | 4.9 | 2026-02-24 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. |
CVE-2026-0400 | Medium | 4.9 | 2026-02-24 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. |
CVE-2026-0399 | Medium | 4.9 | 2026-02-24 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. |