CVE-2026-0205

EUVD-2026-26255
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Affected Products (NVD)
VendorProductVersion
sonicwallsonicos
𝑥
< 6.5.5.2-28n
sonicwallsonicos
7.0.0.0 ≤
𝑥
≤ 7.0.1-5169
sonicwallsonicos
7.1.1-7040 ≤
𝑥
< 7.3.2-7010
sonicwallsonicos
8.0.0-8035 ≤
𝑥
< 8.2.0-8009
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004