CVE-2026-0206

published 2026-04-29

CVE-2026-0206: A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

Priority P4 33 medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C N I N A H

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
sonicwall	sonicos	< 6.5.5.2-28n	6.5.5.2-28n
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	—	—
sonicwall	sonicos	7.0.0.0 – 7.0.1-5169	—
sonicwall	sonicos	>= 7.1.1-7040 < 7.3.2-7010	7.3.2-7010
sonicwall	sonicos	>= 8.0.0-8035 < 8.2.0-8009	8.2.0-8009

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121