EIP-2026-101458

PRE-CVE

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101458. PoCs published by Patrick Webster.

AI-analyzed exploit summary The provided text describes a format-string vulnerability in multiple SonicWALL SSL-VPN devices, which can be exploited to execute arbitrary code or cause a denial-of-service condition. The vulnerability is triggered by unsanitized user input passed to a formatted-printing function.

Description

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

Exploits (1)

exploitdb WRITEUP VERIFIED
by Patrick Webster · textremotehardware
https://www.exploit-db.com/exploits/33016

The provided text describes a format-string vulnerability in multiple SonicWALL SSL-VPN devices, which can be exploited to execute arbitrary code or cause a denial-of-service condition. The vulnerability is triggered by unsanitized user input passed to a formatted-printing function.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: SonicWALL SSL-VPN 200 (firmware prior to 3.0.0.9), SSL-VPN 2000 (firmware prior to 3.5.0.5), SSL-VPN 4000 (firmware prior to 3.5.0.5)
No auth needed
Prerequisites: Network access to the vulnerable device · Ability to send crafted HTTP requests to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026