CVE-2026-0402: Medium severity SonicWall SonicOS vulnerability
Published Feb 24, 2026
·Updated
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
Affected Software
35 affected components
SonicWall SonicOS
All of the following
SonicWall SonicOS<7.3.2-7010
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.2.0-8009
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Feb 24, 2026
CVE Published
via MITRE·02:58 PM
Data Sourced
via MITRE·02:58 PM
DescriptionWeakness
Data Sourced
via NVD·03:21 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0402?
CVE-2026-0402 is classified as a post-authentication Out-of-bounds Read vulnerability which can allow remote attackers to crash a firewall.
2
How do I fix CVE-2026-0402?
To fix CVE-2026-0402, ensure that you update SonicWall SonicOS to a version that patches the vulnerability.
3
What versions of SonicOS are affected by CVE-2026-0402?
SonicWall SonicOS versions prior to 7.3.2-7010 and 8.2.0-8009 are affected by CVE-2026-0402.
4
Can CVE-2026-0402 be exploited remotely?
Yes, CVE-2026-0402 allows remote attackers to exploit the vulnerability after authentication.
5
What impact does CVE-2026-0402 have on network security?
CVE-2026-0402 can lead to a denial of service by crashing the affected firewall, compromising network security.