CVE-2026-0400: Medium severity SonicWall SonicOS vulnerability
Published Feb 24, 2026
·Updated
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
Affected Software
35 affected components
SonicWall SonicOS
All of the following
SonicWall SonicOS<7.3.2-7010
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.2.0-8009
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Feb 24, 2026
CVE Published
via MITRE·02:54 PM
Data Sourced
via MITRE·02:54 PM
DescriptionWeakness
Data Sourced
via NVD·03:21 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0400?
CVE-2026-0400 has a high severity rating due to its potential to crash a firewall.
2
How do I fix CVE-2026-0400?
To fix CVE-2026-0400, update SonicOS to the latest version beyond 7.3.2-7010 and 8.2.0-8009.
3
Which devices are affected by CVE-2026-0400?
CVE-2026-0400 affects SonicWall SonicOS versions prior to 7.3.2-7010 and 8.2.0-8009.
4
What type of vulnerability is CVE-2026-0400?
CVE-2026-0400 is categorized as a post-authentication Format String vulnerability.
5
Can CVE-2026-0400 be exploited remotely?
Yes, CVE-2026-0400 can be exploited remotely, allowing attackers to crash the firewall.