CVE-2026-0399

MEDIUM

SonicOS < 7.3.2-7010 - Authenticated Stack-based Buffer Overflow via Management API Endpoint

Title source: llm

Description

Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.

References (1)

Core 1

Core References

Various Sources vendor-advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001

Scores

CVSS v3 4.9

EPSS 0.0032

EPSS Percentile 23.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-121

Status published

Products (1)

sonicwall/sonicos < 7.3.2-7010

Published Feb 24, 2026

Tracked Since Feb 24, 2026