VulnSocial

CVE-2026-0401Disclosure(sonicwall / nsa_2700)

LOWCVSS 4.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

sonicwall CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsa_2700
  • nsa_2800
  • nsa_3700
  • nsa_3800

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
sonicwall
Products
nsa_2700nsa_2800nsa_3700nsa_3800nsa_4700nsa_4800nsa_5700nsa_5800nsa_6700nssp_10700

1 version affected across 33 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-25: 2Technical Details · 2026-02-25: 202-25
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2026-0399, CVE-2026-0400, CVE-2026-0401, CVE-2026-0402 SonicOS multiple post-authentication vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001

    Post summary

    SonicOS has been disclosed to have multiple post‑authentication vulnerabilities (CVE‑2026‑0399 to CVE‑2026‑0402), with details available via the vendor advisory link.

    00000377
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-0401 A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. https://www.cve.org/CVERecord?id=CVE-2026-0401

    Post summary

    CVE-2026-0401 is a post-authentication NULL pointer dereference vulnerability in SonicOS that can crash the firewall.

    00000178
    56.6K followersView on X
CPE platform detail33 entries

33 of 33 entries

PartVendorProductVersionTarget SWTarget HW
HWsonicwallnsa_2700---
HWsonicwallnsa_2800---
HWsonicwallnsa_3700---
HWsonicwallnsa_3800---
HWsonicwallnsa_4700---
HWsonicwallnsa_4800---
HWsonicwallnsa_5700---
HWsonicwallnsa_5800---
HWsonicwallnsa_6700---
HWsonicwallnssp_10700---
HWsonicwallnssp_11700---
HWsonicwallnssp_13700---
HWsonicwallnssp_15700---
HWsonicwallnsv270---
HWsonicwallnsv470---
HWsonicwallnsv870---
OSsonicwallsonicos---
HWsonicwalltz270---
HWsonicwalltz270w---
HWsonicwalltz280---
HWsonicwalltz370---
HWsonicwalltz370w---
HWsonicwalltz380---
HWsonicwalltz470---
HWsonicwalltz470w---
HWsonicwalltz480---
HWsonicwalltz570---
HWsonicwalltz570p---
HWsonicwalltz570w---
HWsonicwalltz580---
HWsonicwalltz670---
HWsonicwalltz680---
HWsonicwalltz80---

Explore more

Back to dashboardsonicwall CVEsnsa_2700 vulnerabilities