CVE-2026-0401

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0401", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "state": "PUBLISHED", "assignerShortName": "sonicwall", "dateReserved": "2025-12-02T06:28:46.045Z", "datePublished": "2026-02-24T14:55:57.545Z", "dateUpdated": "2026-02-24T15:34:30.604Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux", "Gen7", "Gen8"], "product": "SonicOS", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.1-7013 and older versions"}, {"status": "affected", "version": "8.1.0-8017 and older versions"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Vang3lis of VARAS@IIE"}, {"lang": "en", "type": "finder", "value": "N3vv of Red-Shield Security Lab"}], "datePublic": "2026-02-24T13:46:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"><span style=\"background-color: rgb(255, 255, 255);\">\n\n\n\n<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.</span>\n\n</span>\n\n\n\n</span>\n\n</span>"}], "value": "A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-02-24T14:59:51.145Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001"}], "source": {"advisory": "SNWLID-2026-0001", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T15:34:13.198810Z", "id": "CVE-2026-0401", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T15:34:30.604Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0401", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-24T15:34:13.198810Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T15:34:24.476Z"}}], "cna": {"source": {"advisory": "SNWLID-2026-0001", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Vang3lis of VARAS@IIE"}, {"lang": "en", "type": "finder", "value": "N3vv of Red-Shield Security Lab"}], "affected": [{"vendor": "SonicWall", "product": "SonicOS", "versions": [{"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.1-7013 and older versions"}, {"status": "affected", "version": "8.1.0-8017 and older versions"}], "platforms": ["Linux", "Gen7", "Gen8"], "defaultStatus": "unknown"}], "datePublic": "2026-02-24T13:46:00.000Z", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\"><span style=\"background-color: rgb(255, 255, 255);\">\n\n\n\n<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.</span>\n\n</span>\n\n\n\n</span>\n\n</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "shortName": "sonicwall", "dateUpdated": "2026-02-24T14:59:51.145Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0401", "state": "PUBLISHED", "dateUpdated": "2026-02-24T15:34:30.604Z", "dateReserved": "2025-12-02T06:28:46.045Z", "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315", "datePublished": "2026-02-24T14:55:57.545Z", "assignerShortName": "sonicwall"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "platforms": ["Linux", "Gen7", "Gen8"], "product": "SonicOS", "vendor": "SonicWall", "versions": [{"status": "affected", "version": "7.0.1-5169 and older versions"}, {"status": "affected", "version": "7.3.1-7013 and older versions"}, {"status": "affected", "version": "8.1.0-8017 and older versions"}]}], "source": "PSIRT@sonicwall.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "matchCriteriaId": "C263643A-0274-47CF-881F-59CEF6B8A20A", "versionEndExcluding": "7.3.2-7010", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*", "matchCriteriaId": "50F3A318-F082-4BDD-80EA-51DB15D3458C", "vulnerable": false}, {"criteria": "cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*", "matchCriteriaId": "09CAD976-F02B-40D6-9584-B8146A5A2EA1", "vulnerable": false}, {"criteria": "cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*", "matchCriteriaId": "9079ED9F-0458-4EA8-8E89-5D3D4CA8096F", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*", "matchCriteriaId": "A69E000B-5806-46FD-A233-4E2CC9DD38D2", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C15FED5-C48C-47CF-9645-0563D77883C1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*", "matchCriteriaId": "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*", "matchCriteriaId": "6739DEA3-06FF-4FEB-9931-0DB27F63B70E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*", "matchCriteriaId": "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D6CF3CF-256C-4C04-8BDF-B16398CD0459", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*", "matchCriteriaId": "70340DD4-687B-402C-85AF-C2B80D0F1600", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*", "matchCriteriaId": "52847BA2-470B-4078-A79B-52095DB9214B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*", "matchCriteriaId": "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DBDD10C-F89D-4051-BC70-67B41167FF9B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C23940E-2F9D-447B-A740-42035ED5D400", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*", "matchCriteriaId": "90C790AD-C40E-4527-8F83-D278282A9600", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*", "matchCriteriaId": "352DFCF9-E333-41C0-8033-91265768FD8E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C882C38-9DA5-4C03-BB23-AB2B448E3307", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*", "matchCriteriaId": "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3", "versionEndExcluding": "8.2.0-8009", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*", "matchCriteriaId": "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*", "matchCriteriaId": "3ED8014A-C7A4-4624-8D50-A9844871C1B6", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "D28BF416-D019-438B-954E-FB94697DC011", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*", "matchCriteriaId": "56EC904E-4FCA-4B35-B188-639AE688DD14", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*", "matchCriteriaId": "83B9556B-0A33-4A27-B9E2-00F47969A566", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCFE3403-6A5B-4735-9248-99297A2E4461", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*", "matchCriteriaId": "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE6BC579-21A1-4C2F-B655-73B14C3409A7", "vulnerable": false}, {"criteria": "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*", "matchCriteriaId": "129CC10F-E822-4BF7-9EB5-0D702020CB0C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall."}, {"lang": "es", "value": "Una vulnerabilidad de desreferencia de puntero nulo post-autenticaci\u00f3n en SonicOS permite a un atacante remoto bloquear un cortafuegos."}], "id": "CVE-2026-0401", "lastModified": "2026-11-09T14:48:14.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0401", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T15:34:13.198810Z", "version": "2.0.3"}}]}, "published": "2026-02-24T15:21:37.267", "references": [{"source": "PSIRT@sonicwall.com", "tags": ["Vendor Advisory"], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001"}], "sourceIdentifier": "PSIRT@sonicwall.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "PSIRT@sonicwall.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["linux", "gen7", "gen8"], "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.0.1-5169]"}}, {"platform": ["linux", "gen7", "gen8"], "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.3.1-7013]"}}, {"platform": ["linux", "gen7", "gen8"], "status": "affected", "versions": {"scheme": "semver", "value": "[0,8.1.0-8017]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "SonicOS", "source": "cna", "vendor": "SonicWall"}, "product": "sonicos", "vendor": "sonicwall"}], "analysis": {"en": {"generated_at": "2026-04-17T15:46:50.762175+00:00", "value": {"mitigation_remediation": ["Download and install the latest SonicOS firmware that addresses the NULL pointer dereference issue.", "If a direct firmware upgrade is not yet available, isolate the firewall from external management interfaces and restrict remote access to trusted networks only until the patch is released.", "Configure the firewall to generate alerts on unexpected crash or restart events and review logs to detect potential malicious activity."], "summary": {"action": "Apply Patch", "impact": "Denial of service via crash of the firewall"}, "threat_synthesis": {"affected_systems": "Devices running SonicOS versions on multiple SonicWall hardware families including the NSA 2700, 2800, 3700, 3800, 4700, 4800, 5700, 5800, 6700 series, and the NSSP 10700, 11700, 13700, 15700, NSV270, NSV470, NSV870, TZ270, TZ280, TZ370, TZ380, TZ470, TZ480, TZ570, TZ570p, TZ570w, TZ580, TZ670, TZ680, TZ80, as well as the generic SonicOS firmware are susceptible. Exact affected firmware revisions are not listed, so all recent releases prior to an identified fix should be considered vulnerable.", "description_and_impact": "A post\u2011authentication NULL pointer dereference in SonicOS allows a remote attacker to crash the firewall by sending specially crafted input. The core weakness resides in the code handling an unspecified packet, causing a segmentation fault when the pointer is dereferenced. The crash interrupts firewall operation, potentially dropping all traffic that flows through the affected device. The primary impact is a denial\u2011of\u2011service that can disrupt network connectivity.", "risk_and_exploitability": "The CVSS score of 4.9 reflects moderate severity, largely due to the post\u2011authentication requirement. However, the EPSS score is <1\u202f%, indicating that exploit activity is expected to be very low, and the vulnerability is currently not catalogued in CISA\u2019s KEV list. The attack vector requires valid administrative credentials to trigger the crash, making remote exploitation less likely but still dangerous for exposed firewalls. If the vulnerability remains unpatched, an attacker could mount a DoS attack by repeatedly sending the malicious input, potentially taking the firewall offline and undermining network availability."}}}}, "created": "2026-02-25T11:38:56.217196+00:00", "title": "Null Pointer Dereference Crash Vulnerability in SonicOS", "updated": "2026-04-17T16:00:11.360360+00:00", "vendors": ["sonicwall", "sonicwall$PRODUCT$sonicos"]}