VulnSocial

CVE-2026-0206Patch(sonicwall / nsa_2650)

LOWCVSS 4.9 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch sonicwall nsa_2650 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

sonicwall CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsa_2650
  • nsa_2700
  • nsa_2800
  • nsa_3600

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-04-30)
  • 4 total mentions across 2 days

Affected systems

Vendors
sonicwall
Products
nsa_2650nsa_2700nsa_2800nsa_3600nsa_3650nsa_3700nsa_3800nsa_4600nsa_4650nsa_4700

1 version affected across 64 products

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-29: 1Mentions · 2026-04-30: 3Patch / Workaround · 2026-04-30: 2Technical Details · 2026-04-29: 1Technical Details · 2026-04-30: 204-2904-30
Signal classification3 categories
Patch
250.0%
Disclosure
125.0%
General
125.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-291
Disclosure1
2026-04-303
General1Patch2
Full discourse4 posts
  • Autumn Good@autumn_good_35
    General

    1) CVE-2026-0204 - SonicOS Improper Access Control Vulnerability 2) CVE-2026-0205 - SonicOS post-authentication Path Traversal vulnerability 3) CVE-2026-0206 - SonicOS post-authentication Stack-based Buffer Overflow vulnerability https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

    Post summary

    The text lists three SonicOS CVEs with general vulnerability descriptors but does not provide evidence of active exploitation, PoC, or patch availability.

    00010393
    6.8K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: #SonicWall patched 3 vulnerabilities in #SonicOS (CVE-2026-0204, CVSS 8.1; CVE-2026-0205, CVSS 6.8; CVE-2026-0206, CVSS 4.9). The vulnerabilities can lead to unauthorized access and firewall disruption. Time to #Patch #Patch #Patch

    Post summary

    SonicWall released patches for three CVE-2026 vulnerabilities in SonicOS that could allow unauthorized access and firewall disruption.

    01000242
    7.2K followersView on X
  • breachcache@breachcache
    Patch

    Patch your SonicWalls ASAP and don’t publicly expose your management console! CVE-2026-0204 CVE-2026-0205 CVE-2026-0206 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

    Post summary

    The message urges SonicWall users to apply urgent patches for CVE‑2026‑0204, CVE‑2026‑0205, and CVE‑2026‑0206, linking to a vendor advisory and warning against exposing the management console.

    0000073
    24 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-0206 A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. https://www.cve.org/CVERecord?id=CVE-2026-0206

    Post summary

    The post announces a new post-authentication stack-based buffer overflow vulnerability in SonicOS that can cause a firewall crash, but no PoC, exploit, or patch details are provided.

    00000108
    57.3K followersView on X
CPE platform detail64 entries

64 of 64 entries

PartVendorProductVersionTarget SWTarget HW
HWsonicwallnsa_2650---
HWsonicwallnsa_2700---
HWsonicwallnsa_2800---
HWsonicwallnsa_3600---
HWsonicwallnsa_3650---
HWsonicwallnsa_3700---
HWsonicwallnsa_3800---
HWsonicwallnsa_4600---
HWsonicwallnsa_4650---
HWsonicwallnsa_4700---
HWsonicwallnsa_4800---
HWsonicwallnsa_5600---
HWsonicwallnsa_5650---
HWsonicwallnsa_5700---
HWsonicwallnsa_5800---
HWsonicwallnsa_6600---
HWsonicwallnsa_6650---
HWsonicwallnsa_6700---
HWsonicwallnssp_10700---
HWsonicwallnssp_11700---
HWsonicwallnssp_13700---
HWsonicwallnssp_15700---
HWsonicwallnsv_270---
HWsonicwallnsv_470---
HWsonicwallnsv_870---
HWsonicwallsm_9200---
HWsonicwallsm_9250---
HWsonicwallsm_9400---
HWsonicwallsm_9450---
HWsonicwallsm_9600---
HWsonicwallsm_9650---
HWsonicwallsoho_250---
HWsonicwallsoho_250w---
HWsonicwallsohow---
OSsonicwallsonicos---
HWsonicwalltz270---
HWsonicwalltz270w---
HWsonicwalltz280---
HWsonicwalltz280w---
HWsonicwalltz370---
HWsonicwalltz370w---
HWsonicwalltz380---
HWsonicwalltz380w---
HWsonicwalltz470---
HWsonicwalltz470w---
HWsonicwalltz480---
HWsonicwalltz570---
HWsonicwalltz570p---
HWsonicwalltz570w---
HWsonicwalltz580---
HWsonicwalltz670---
HWsonicwalltz680---
HWsonicwalltz80---
HWsonicwalltz_300---
HWsonicwalltz_300p---
HWsonicwalltz_300w---
HWsonicwalltz_350---
HWsonicwalltz_350w---
HWsonicwalltz_400---
HWsonicwalltz_400w---
HWsonicwalltz_500---
HWsonicwalltz_500w---
HWsonicwalltz_600---
HWsonicwalltz_600p---

Explore more

Back to dashboardsonicwall CVEsnsa_2650 vulnerabilities