CVE-2026-0204
HIGHDescription
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
Is your site exposed to CVE-2026-0204?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sonicwall | sonicos |
| sonicwall | nsa_2650 |
| sonicwall | nsa_3600 |
| sonicwall | nsa_3650 |
| sonicwall | nsa_4600 |
| sonicwall | nsa_4650 |
| sonicwall | nsa_5600 |
| sonicwall | nsa_5650 |
| sonicwall | nsa_6600 |
| sonicwall | nsa_6650 |
| sonicwall | sm_9200 |
| sonicwall | sm_9250 |
| sonicwall | sm_9400 |
| sonicwall | sm_9450 |
| sonicwall | sm_9600 |
| sonicwall | sm_9650 |
| sonicwall | soho_250 |
| sonicwall | soho_250w |
| sonicwall | sohow |
| sonicwall | tz_300 |
| sonicwall | tz_300p |
| sonicwall | tz_300w |
| sonicwall | tz_350 |
| sonicwall | tz_350w |
| sonicwall | tz_400 |
| sonicwall | tz_400w |
| sonicwall | tz_500 |
| sonicwall | tz_500w |
| sonicwall | tz_600 |
| sonicwall | tz_600p |
| sonicwall | sonicos |
| sonicwall | sonicos |
| sonicwall | nsa_2700 |
| sonicwall | nsa_3700 |
| sonicwall | nsa_4700 |
| sonicwall | nsa_5700 |
| sonicwall | nsa_6700 |
| sonicwall | nssp_10700 |
| sonicwall | nssp_11700 |
| sonicwall | nssp_13700 |
| sonicwall | nssp_15700 |
| sonicwall | nsv_270 |
| sonicwall | nsv_470 |
| sonicwall | nsv_870 |
| sonicwall | tz270 |
| sonicwall | tz270w |
| sonicwall | tz370 |
| sonicwall | tz370w |
| sonicwall | tz470 |
| sonicwall | tz470w |
| sonicwall | tz570 |
| sonicwall | tz570p |
| sonicwall | tz570w |
| sonicwall | tz670 |
| sonicwall | sonicos |
| sonicwall | nsa_2800 |
| sonicwall | nsa_3800 |
| sonicwall | nsa_4800 |
| sonicwall | nsa_5800 |
| sonicwall | tz280 |
| sonicwall | tz280w |
| sonicwall | tz380 |
| sonicwall | tz380w |
| sonicwall | tz480 |
| sonicwall | tz580 |
| sonicwall | tz680 |
| sonicwall | tz80 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-0204? +
How severe is CVE-2026-0204? +
What products are affected by CVE-2026-0204? +
How do I check if I'm vulnerable to CVE-2026-0204? +
Related Vulnerabilities
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to …
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring …
Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT …
A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR …
A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow an unauthenticated physical …
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that …