nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-66151 CVE-2026-66151
MEDIUM
SonicWall Global VPN Client SWIPsec.sys Driver Out-of-Bounds Kernel Memory Read
Record summary
CVE-2026-66151 has a selected CVSS score of 5.5 (medium).
Description
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 11, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Global VPN ClientBrowse SonicWall / Global VPN ClientDefault status: unknown | CVE List | 4.10.8.1108 and earlier versions | affected |
References
2psirt.global.sonicwall.comVendor advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0010