CVE-2026-0399: Buffer Overflow
Published Feb 24, 2026
·Updated
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
Affected Software
35 affected components
SonicWall SonicOS
All of the following
SonicWall SonicOS<7.3.2-7010
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.2.0-8009
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Feb 24, 2026
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
DescriptionWeakness
Data Sourced
via NVD·03:21 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0399?
CVE-2026-0399 is classified as a high-severity vulnerability due to the possibility of remote exploitation.
2
How do I fix CVE-2026-0399?
To fix CVE-2026-0399, update SonicWall SonicOS to the latest version as specified by SonicWall.
3
What systems are affected by CVE-2026-0399?
CVE-2026-0399 affects all versions of SonicWall SonicOS prior to 7.3.2-7010 and 8.2.0-8009.
4
What type of vulnerability is CVE-2026-0399?
CVE-2026-0399 is a post-authentication stack-based buffer overflow vulnerability.
5
Can CVE-2026-0399 be exploited remotely?
Yes, CVE-2026-0399 can be exploited remotely if the attacker has valid authentication credentials.