CVE-2026-0402Disclosure(sonicwall / nsa_2700)

LOWCVSS 4.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch sonicwall nsa_2700 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsa_2700
  • nsa_2800
  • nsa_3700
  • nsa_3800

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
nsa_2700nsa_2800nsa_3700nsa_3800nsa_4700nsa_4800nsa_5700nsa_5800nsa_6700nssp_10700

1 version affected across 33 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-25: 2Patch / Workaround · 2026-02-25: 1Technical Details · 2026-02-25: 202-25
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2026-0399, CVE-2026-0400, CVE-2026-0401, CVE-2026-0402 SonicOS multiple post-authentication vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001

    Post summary

    SonicWall has disclosed four post-authentication vulnerabilities (CVE-2026-0399 to CVE-2026-0402) and provided a vendor advisory link for further details.

    00000377
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-0402 A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. https://www.cve.org/CVERecord?id=CVE-2026-0402

    Post summary

    CVE-2026-0402 is a post‑authentication out‑of‑bounds read vulnerability in SonicOS that can crash the firewall; no PoC, exploit, or patch details are provided.

    00000181
    56.6K followersView on X
CPE platform detail33 entries

33 of 33 entries

PartVendorProductVersionTarget SWTarget HW
HWsonicwallnsa_2700---
HWsonicwallnsa_2800---
HWsonicwallnsa_3700---
HWsonicwallnsa_3800---
HWsonicwallnsa_4700---
HWsonicwallnsa_4800---
HWsonicwallnsa_5700---
HWsonicwallnsa_5800---
HWsonicwallnsa_6700---
HWsonicwallnssp_10700---
HWsonicwallnssp_11700---
HWsonicwallnssp_13700---
HWsonicwallnssp_15700---
HWsonicwallnsv270---
HWsonicwallnsv470---
HWsonicwallnsv870---
OSsonicwallsonicos---
HWsonicwalltz270---
HWsonicwalltz270w---
HWsonicwalltz280---
HWsonicwalltz370---
HWsonicwalltz370w---
HWsonicwalltz380---
HWsonicwalltz470---
HWsonicwalltz470w---
HWsonicwalltz480---
HWsonicwalltz570---
HWsonicwalltz570p---
HWsonicwalltz570w---
HWsonicwalltz580---
HWsonicwalltz670---
HWsonicwalltz680---
HWsonicwalltz80---

Explore more