CVE-2026-0205

published 2026-04-29

CVE-2026-0205: A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Priority P4 33 medium 6.8 CVSS 3.1

AV A AC L PR N UI R S U C L I L A H

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
sonicwall	sonicos	< 6.5.5.2-28n	6.5.5.2-28n
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	7.0.0.0 – 7.0.1-5169	—
sonicwall	sonicos	>= 7.1.1-7040 < 7.3.2-7010	7.3.2-7010
sonicwall	sonicos	>= 8.0.0-8035 < 8.2.0-8009	8.2.0-8009

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-35