CVE-2026-77708: Buffer Overflow

Published Nov 6, 2026

Updated

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

Event History

Nov 6, 2026

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require valid TACACS+ or SonicOS credentials?

No. The issue is described as pre-authentication and potentially exploitable by a remote unauthenticated attacker.

What impact is confirmed by the available information?

The stated potential impact is an application-level denial of service. The provided information does not claim code execution, data exposure, or privilege escalation.

Are the conditions needed to trigger the issue documented?

No. The description states that exploitation is possible only in specific conditions, but does not identify those conditions or affected configurations.

CVE-2026-77708: Buffer Overflow

Event History

Frequently Asked Questions

Does exploitation require valid TACACS+ or SonicOS credentials?

What impact is confirmed by the available information?

Are the conditions needed to trigger the issue documented?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require valid TACACS+ or SonicOS credentials?

What impact is confirmed by the available information?

Are the conditions needed to trigger the issue documented?