CVE-2026-0401: Null Pointer Dereference
Published Feb 24, 2026
·Updated
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
Affected Software
35 affected components
SonicWall SonicOS
All of the following
SonicWall SonicOS<7.3.2-7010
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.2.0-8009
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Feb 24, 2026
CVE Published
via MITRE·02:55 PM
Data Sourced
via MITRE·02:55 PM
DescriptionWeakness
Data Sourced
via NVD·03:21 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0401?
CVE-2026-0401 is classified as a high severity vulnerability due to its potential to crash a firewall.
2
How do I fix CVE-2026-0401?
To fix CVE-2026-0401, you should upgrade SonicOS to the latest version that is not affected by this vulnerability.
3
What devices are affected by CVE-2026-0401?
CVE-2026-0401 affects several versions of SonicWall SonicOS, particularly versions prior to 7.3.2-7010 and 8.2.0-8009.
4
Can CVE-2026-0401 be exploited remotely?
Yes, CVE-2026-0401 can be exploited remotely by an attacker who has authenticated access to the firewall.
5
What impact does CVE-2026-0401 have on my network?
CVE-2026-0401 can lead to a denial-of-service condition, causing the affected firewall to become unresponsive.