Skip to content

CVE-2025-40604

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
November 20, 2025
Last Seen
November 22, 2025
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances, allowing remote, unauthenticated attackers to exploit a stack-based buffer overflo...

SonicWall has released a patch addressing a vulnerability in SonicOS that allows hackers to crash firewalls. Additionally, two flaws in Email Security appliances (CVE-2025-40604 and CVE-2025-40605) have been fixed, preventing potential code execution and data access. Customers are urged to apply the...

SonicWall has disclosed a critical vulnerability in its SonicOS SSLVPN service, tracked as CVE-2025-40601, which allows remote, unauthenticated attackers to crash Gen7 and Gen8 firewalls. The flaw, caused by a stack-based buffer overflow, poses significant risks for organizations using SonicWall for...

SonicWall has released a patch addressing a critical flaw in SonicOS that allows hackers to crash firewalls. Additionally, two vulnerabilities in Email Security appliances (CVE-2025-40604 and CVE-2025-40605) have been fixed, preventing potential code execution and unauthorized data access. Customers...

Public Exploits

Checking GitHub for proof-of-concept code…