CVE-2026-0205

MEDIUM

6.8

Descripcion

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Detalles CVE

Puntuacion CVSS v3.16.8

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Vector de ataqueADJACENT_NETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado4/29/2026

Ultima modificacion5/5/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

sonicwall:nsa_2650sonicwall:nsa_2700sonicwall:nsa_2800sonicwall:nsa_3600sonicwall:nsa_3650sonicwall:nsa_3700sonicwall:nsa_3800sonicwall:nsa_4600sonicwall:nsa_4650sonicwall:nsa_4700sonicwall:nsa_4800sonicwall:nsa_5600sonicwall:nsa_5650sonicwall:nsa_5700sonicwall:nsa_5800sonicwall:nsa_6600sonicwall:nsa_6650sonicwall:nsa_6700sonicwall:nssp_10700sonicwall:nssp_11700sonicwall:nssp_13700sonicwall:nssp_15700sonicwall:nsv_270sonicwall:nsv_470sonicwall:nsv_870sonicwall:sm_9200sonicwall:sm_9250sonicwall:sm_9400sonicwall:sm_9450sonicwall:sm_9600sonicwall:sm_9650sonicwall:soho_250sonicwall:soho_250wsonicwall:sohowsonicwall:sonicossonicwall:tz270sonicwall:tz270wsonicwall:tz280sonicwall:tz280wsonicwall:tz370sonicwall:tz370wsonicwall:tz380sonicwall:tz380wsonicwall:tz470sonicwall:tz470wsonicwall:tz480sonicwall:tz570sonicwall:tz570psonicwall:tz570wsonicwall:tz580sonicwall:tz670sonicwall:tz680sonicwall:tz80sonicwall:tz_300sonicwall:tz_300psonicwall:tz_300wsonicwall:tz_350sonicwall:tz_350wsonicwall:tz_400sonicwall:tz_400wsonicwall:tz_500sonicwall:tz_500wsonicwall:tz_600sonicwall:tz_600p

Debilidades (CWE)

CWE-35

Referencias

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004(PSIRT@sonicwall.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.