CVE-2026-0401

Published: Feb 24, 2026Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.

Affected (2)

Products: Sonicwall: Sonicos

1 product

Configuration A

1 vulnerable · 22 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Before 7.3.2-7010

Running on/with	Platform Versions
Sonicwall Nsa 2700	All versions
Sonicwall Nsa 3700	All versions
Sonicwall Nsa 4700	All versions
Sonicwall Nsa 5700	All versions
Sonicwall Nsa 6700	All versions
Sonicwall Nssp 10700	All versions
Sonicwall Nssp 11700	All versions
Sonicwall Nssp 13700	All versions
Sonicwall Nssp 15700	All versions
Sonicwall Nsv270	All versions
Sonicwall Nsv470	All versions
Sonicwall Nsv870	All versions
Sonicwall Tz270	All versions
Sonicwall Tz270w	All versions
Sonicwall Tz370	All versions
Sonicwall Tz370w	All versions
Sonicwall Tz470	All versions
Sonicwall Tz470w	All versions
Sonicwall Tz570	All versions
Sonicwall Tz570p	All versions
Sonicwall Tz570w	All versions
Sonicwall Tz670	All versions

Configuration B

1 vulnerable · 10 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Before 8.2.0-8009

Running on/with	Platform Versions
Sonicwall Nsa 2800	All versions
Sonicwall Nsa 3800	All versions
Sonicwall Nsa 4800	All versions
Sonicwall Nsa 5800	All versions
Sonicwall Tz280	All versions
Sonicwall Tz380	All versions
Sonicwall Tz480	All versions
Sonicwall Tz580	All versions
Sonicwall Tz680	All versions
Sonicwall Tz80	All versions

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001

Source: PSIRT@sonicwall.com

Vendor Advisory

Timeline

No history available yet.