CVE-2026-0206

Analyzed Analyzed - Analysis Complete

Stack-based Buffer Overflow in SonicOS

Publication date: 2026-04-29

Last updated on: 2026-05-05

Assigner: SonicWALL, Inc.

Description

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-29

Last Modified

2026-05-05

Generated

2026-07-06

AI Q&A

2026-04-30

EPSS Evaluated

2026-07-05

NVD

CVE-2026-0206

EUVD

EUVD-2026-26256

Affected Vendors & Products

Vendor	Product	Version / Range
sonicwall	sonicos	to 6.5.5.2-28n (exc)
sonicwall	sonicos	From 7.0.0.0 (inc) to 7.0.1-5169 (inc)
sonicwall	sonicos	From 7.1.1-7040 (inc) to 7.3.2-7010 (exc)
sonicwall	sonicos	From 8.0.0-8035 (inc) to 8.2.0-8009 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a post-authentication stack-based buffer overflow in SonicOS. It allows a remote attacker who has authenticated access to the system to exploit the flaw and cause the firewall to crash.

Executive Summary

Impact Analysis

The vulnerability can impact you by allowing a remote attacker to crash your firewall, potentially causing denial of service. This could disrupt network security and availability.

Impact Analysis

The impact of this vulnerability is that a remote attacker can cause a denial of service by crashing the firewall. This can disrupt network security and availability, potentially leading to downtime or loss of protection.

Hi! I’m here to help you understand CVE-2026-0206. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70