Back Digital.Nhs.Uk

CC-4775

Digital.Nhs.Uk •[email protected] (NHS Digital) • April 30, 2026

CVE-2026-0204 could allow an unauthenticated attacker to access certain management interface functions

The following platforms are known to be affected:

SonicWall has released a security update addressing three vulnerabilities affecting SonicOS. Successful exploitation could allow an unauthenticated attacker to bypass authentication and access certain management interface functions or restricted services.

Affected organisations are encouraged to review SonicWall Security Advisory SNWLID-2026-0004 and apply the relevant updates as soon as possible.

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

Last edited: 30 April 2026 1:15 pm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SonicOS Vulnerabilities Expose Firewalls to Unauthorized Access and Crashes SonicWall has identified three critical vulnerabilities in its SonicOS firewall operating system, disclosed in security advisory SNWLID-2026-0004. The most severe vulnerability, CVE-2026-0204, allows unauthenticated attackers to bypass authentication and access management interface functions, rated with a CVSS score of 8.0. Additionally, CVE-2026-0205 enables logged-in users to exploit a path traversal vulnerability, while CVE-2026-0206 allows for a denial-of-service attack through a stack-based buffer overflow. These vulnerabilities were reported by CrowdStrike and have not yet been actively exploited. SonicWall has released patches for affected firmware versions, urging administrators to apply updates immediately. Organizations using SonicWall firewalls should also consider disabling the management interface temporarily as a precaution. The vulnerabilities could potentially lead to unauthorized access to sensitive functions and service disruptions. 10 sources 69

Extracted Entities

CC-4775

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (4)

Platforms (1)