PT-2026-35945 · Sonicwall · Sonicos

Published 2026-04-29 · Updated 2026-05-22 · CVE-2026-0204

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description A flaw in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

CWE-1390

Related Identifiers

CVE-2026-0204

Affected Products

Sonicos

References · 17

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0204 · Security Note
• https://twitter.com/nxtgen579255/status/2051109347128910167 · Twitter Post
• https://twitter.com/CVEnew/status/2049578392237064274 · Twitter Post
• https://twitter.com/autumn_good_35/status/2049878533087076743 · Twitter Post
• https://twitter.com/breachcache/status/2049892629895151692 · Twitter Post
• https://t.me/netlas/561 · Telegram Post
• https://twitter.com/the_yellow_fall/status/2049660003183919252 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2057623814343696504 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2049611263420862772 · Twitter Post
• https://twitter.com/CCBalert/status/2049821683050033563 · Twitter Post
• https://twitter.com/cageyvdev/status/2050222649540784264 · Twitter Post
• https://reddit.com/r/linuxadmin/comments/1t8uvui/cve20260300_panos_unauthenticated_root_rce_via · Reddit Post
• https://twitter.com/catnap707/status/2050426432002871409 · Twitter Post
• https://twitter.com/Netlas_io/status/2050109583083839838 · Twitter Post