SonicOS — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• CVE-2024-40766 Exploited by Ransomware Groups Targeting SonicWall Firewalls

  CVE-2024-40766 is an improper access control vulnerability in SonicWall SonicOS affecting Gen 5, Gen 6, and Gen 7 firewalls. The vulnerability, with a CVSS score of 9.3, allows unauthorized access and can crash the…

  2 articles · Updated June 23, 2026
• SonicWall SonicOS Vulnerabilities Expose Firewalls to Unauthorized Access and Crashes

  SonicWall has identified three critical vulnerabilities in its SonicOS firewall operating system, disclosed in security advisory SNWLID-2026-0004. The most severe vulnerability, CVE-2026-0204, allows unauthenticated…

  10 articles · Updated April 30, 2026
• Surge in Scanning Activity Targeting SonicWall Firewalls Raises Alarm

  A significant increase in scanning activity targeting SonicWall firewall management interfaces has been detected, with nearly 597,000 sessions recorded on May 12, 2026. This spike, reported by threat intelligence firm…

  2 articles · Updated May 25, 2026
• SonicWall SonicOS Vulnerability Allows Remote DoS Attacks

  SonicWall has issued a security advisory regarding a critical vulnerability in its SonicOS operating system, identified as CVE-2025-40601. This high-severity flaw affects Gen7 and Gen8 hardware and virtual appliances,…

  9 articles · Updated November 20, 2025
• SonicWall Investigates State-Backed Breach of Cloud Backup Service

  SonicWall reported a security incident involving unauthorized access to backup firewall configuration files stored in a cloud environment. The company attributed the breach to a state-backed threat actor and engaged…

  8 articles · Updated November 21, 2025
• SonicWall Investigates State-Backed Breach of Cloud Backup Service

  SonicWall reported unauthorized access to backup firewall configuration files in September 2025, attributed to a state-backed threat actor. The company engaged Mandiant for an investigation and communicated with…

  11 articles · Updated November 26, 2025
• Massive Attack on SonicWall Firewalls Using Over 4,000 IP Addresses

  A reconnaissance campaign targeting SonicWall firewalls is underway, with attackers utilizing over 4,000 unique IP addresses to identify vulnerable devices. From February 22 to February 25, 2026, there were 84,142…

  3 articles · Updated March 2, 2026
• SonicWall Issues Patch for SonicOS Flaw Affecting Firewalls

  SonicWall has released a patch addressing a vulnerability in SonicOS that allows hackers to crash firewalls. Additionally, two flaws in Email Security appliances (CVE-2025-40604 and CVE-2025-40605) have been fixed,…

  2 articles · Updated November 22, 2025
• SonicWall SonicOS Flaw Allows Remote Firewall Crashes

  SonicWall has disclosed a critical vulnerability in its SonicOS SSLVPN service, tracked as CVE-2025-40601, which allows remote, unauthenticated attackers to crash Gen7 and Gen8 firewalls. The flaw, caused by a…

  11 articles · Updated November 24, 2025
• SonicWall Issues Patch for Critical SonicOS Flaw Affecting Firewalls

  SonicWall has released a patch addressing a critical flaw in SonicOS that allows hackers to crash firewalls. Additionally, two vulnerabilities in Email Security appliances (CVE-2025-40604 and CVE-2025-40605) have been…

  2 articles · Updated November 22, 2025

Recent Intelligence Reports

• CVE-2024-40766 — nvd.nist.gov · June 23, 2026
• CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd) — Isc.Sans.Edu · June 23, 2026
• Hackers Actives Scanning SonicWall Firewall Interfaces – 597,000 Sessions Observed — Cybersecuritynews · May 25, 2026
• CC-4775 — Digital.Nhs.Uk · April 30, 2026
• SonicWall SonicOS: Security vulnerability allows management interface access — Heise.De · April 30, 2026
• SonicWall SonicOS Flaw Lets Attackers Bypass Access Controls and Crash Firewalls — Gbhackers · April 30, 2026
• Hackers Attacking SonicWall Firewalls from 4,000+ unique IP Addresses to Exploit Vulnerabilities — Cybersecuritynews · March 2, 2026
• Cyberattacks on legacy firewalls continue. What security teams can do — Scworld · November 26, 2025

Related Entities