CVE Tools
Track your stack

Sonicos

90 CVEs tracked. 4 of them are in CISA KEV.

This hub aggregates every CVE we track for Sonicos, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Sonicos CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Sonicos CVEs per month
MonthCVEs
2024-120
2025-019
2025-020
2025-030
2025-041
2025-050
2025-060
2025-071
2025-080
2025-090
2025-100
2025-111
2025-120
2026-010
2026-024
2026-031
2026-043
2026-050
2026-060
2026-070
2026-081
2026-090
2026-100
2026-117

Severity

How the 90 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1517%
  • High3741%
  • Medium3842%

Latest CVEs

The 15 most recently published vulnerabilities affecting Sonicos.

  1. CVE-2026-19703A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a p...5.1
  2. CVE-2026-77709A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauth...5.9
  3. CVE-2026-77708A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unaut...5.9
  4. CVE-2026-19868An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successf...7.5
  5. CVE-2026-82308A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an applic...7.5
  6. CVE-2026-107154A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauth...8.8
  7. CVE-2026-107155A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to pe...8.8
  8. CVE-2026-0516A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitra...6.5
  9. CVE-2026-0206A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.4.9
  10. CVE-2026-0205A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.6.8
  11. CVE-2026-0204A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.8.0
  12. CVE-2026-3439A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.4.9
  13. CVE-2026-0402A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.4.9
  14. CVE-2026-0401A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.4.9
  15. CVE-2026-0400A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.4.9

Product grouping is registry-driven, with AI assist and human review. How it works