CVE-2025-40601

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 20, 2025

Last Seen

November 23, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SonicWall SonicOS Vulnerability Allows Remote DoS Attacks44.6

SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances, allowing remote, unauthenticated attackers to exploit a stack-based buffer overflo...

SonicWall SonicOS Flaw Allows Remote Firewall Crashes23.4

SonicWall has disclosed a critical vulnerability in its SonicOS SSLVPN service, tracked as CVE-2025-40601, which allows remote, unauthenticated attackers to crash Gen7 and Gen8 firewalls. The flaw, caused by a stack-based buffer overflow, poses significant risks for organizations using SonicWall for...