SonicWall security advisories, November 2026

Every SonicWall security advisory published in November 2026, from SonicWall PSIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 11
Critical: 1
High: 1
In CISA KEV: 2
CVEs: 9

SonicWall advisories published in November 2026

Nov 6, 2026
High [CVE-2026-107154 +6] SonicOS: session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could…
High8.8ExploitedCISA KEV
Nov 6, 2026
Advisory [CVE-2026-19703] weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential
Unrated
Nov 6, 2026
Advisory [CVE-2026-77709] pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service
Unrated
Nov 6, 2026
Advisory [CVE-2026-77708] pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service
Unrated
Nov 6, 2026
Advisory [CVE-2026-19868] authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls
UnratedExploitedCISA KEV
Nov 6, 2026
Advisory [CVE-2026-82308] pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service
Unrated
Nov 6, 2026
Advisory [CVE-2026-107154] session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations
Unrated
Nov 6, 2026
Advisory [CVE-2026-107155] permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations
Unrated
Nov 3, 2026
Critical [CVE-2026-109593 +1] GMS: unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GM…
Critical9.1
Nov 3, 2026
Advisory [CVE-2026-109594] Global Management System (GMS): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database
Unrated
Nov 3, 2026
Advisory [CVE-2026-109593] Global Management System (GMS): unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information
Unrated

Get an email when SonicWall publishes the next one.

See SonicWall's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about SonicWall

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.