CVE-2026-82308: Buffer Overflow
Published Nov 6, 2026
·Updated
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.
Event History
Nov 6, 2026
CVE Published
via MITRE·06:54 PM
Data Sourced
via MITRE·06:54 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need valid VPN credentials to trigger the issue?
No. The vulnerability is pre-authentication and may be triggered by a remote unauthenticated attacker.
2
What impact is documented for successful exploitation?
Successful exploitation could cause an application-level denial of service in the SSL-VPN service. The provided information does not describe code execution, data exposure, or authentication bypass.