PT-2026-35947 · Sonicwall · Sonicos

Published 2026-04-29 · Updated 2026-04-30 · CVE-2026-0206

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description A post-authentication stack-based buffer overflow allows a remote attacker to crash a firewall. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-0206

Affected Products

Sonicos

References · 6

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0206 · Security Note
• https://twitter.com/autumn_good_35/status/2049878533087076743 · Twitter Post
• https://twitter.com/CCBalert/status/2049821683050033563 · Twitter Post
• https://twitter.com/CVEnew/status/2049578390336999613 · Twitter Post
• https://twitter.com/breachcache/status/2049892629895151692 · Twitter Post