CVE-2026-3439: Buffer Overflow
Published Mar 4, 2026
·Updated
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.
Affected Software
35 affected components
SonicWall SonicOS
All of the following
SonicWall SonicOS<7.3.2-7010
Any of the following
SonicWall Nsa 2700
SonicWall Nsa 3700
SonicWall Nsa 4700
SonicWall Nsa 5700
SonicWall Nsa 6700
SonicWall Nssp 10700
SonicWall Nssp 11700
SonicWall Nssp 13700
SonicWall Nssp 15700
SonicWall Nsv270
SonicWall Nsv470
SonicWall Nsv870
SonicWall Tz270
SonicWall Tz270w
SonicWall Tz370
SonicWall Tz370w
SonicWall Tz470
SonicWall Tz470w
SonicWall Tz570
SonicWall Tz570p
SonicWall Tz570w
SonicWall Tz670
All of the following
SonicWall SonicOS<8.2.0-8009
Any of the following
SonicWall Nsa 2800
SonicWall Nsa 3800
SonicWall Nsa 4800
SonicWall Nsa 5800
SonicWall Tz280
SonicWall Tz380
SonicWall Tz480
SonicWall Tz580
SonicWall Tz680
SonicWall TZ80
Event History
Mar 4, 2026
CVE Published
via MITRE·09:19 AM
Data Sourced
via MITRE·09:19 AM
DescriptionWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeaknessAffected Software
Dec 9, 58210
Event
via FIRST·07:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-3439?
CVE-2026-3439 is classified as a critical severity vulnerability that can lead to a stack-based buffer overflow.
2
How do I fix CVE-2026-3439?
To fix CVE-2026-3439, upgrade SonicWall SonicOS to the latest version that is not affected by this vulnerability.
3
What are the potential impacts of CVE-2026-3439?
CVE-2026-3439 allows a remote attacker to crash the firewall, leading to loss of availability.
4
Who is affected by CVE-2026-3439?
CVE-2026-3439 affects various versions of SonicWall SonicOS prior to 7.3.2-7010 and 8.2.0-8009.
5
Is CVE-2026-3439 exploitable remotely?
Yes, CVE-2026-3439 can be exploited remotely after successful authentication.