CVE-2026-0205
MEDIUMDescription
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sonicwall | sonicos |
| sonicwall | nsa_2650 |
| sonicwall | nsa_3600 |
| sonicwall | nsa_3650 |
| sonicwall | nsa_4600 |
| sonicwall | nsa_4650 |
| sonicwall | nsa_5600 |
| sonicwall | nsa_5650 |
| sonicwall | nsa_6600 |
| sonicwall | nsa_6650 |
| sonicwall | sm_9200 |
| sonicwall | sm_9250 |
| sonicwall | sm_9400 |
| sonicwall | sm_9450 |
| sonicwall | sm_9600 |
| sonicwall | sm_9650 |
| sonicwall | soho_250 |
| sonicwall | soho_250w |
| sonicwall | sohow |
| sonicwall | tz_300 |
| sonicwall | tz_300p |
| sonicwall | tz_300w |
| sonicwall | tz_350 |
| sonicwall | tz_350w |
| sonicwall | tz_400 |
| sonicwall | tz_400w |
| sonicwall | tz_500 |
| sonicwall | tz_500w |
| sonicwall | tz_600 |
| sonicwall | tz_600p |
| sonicwall | sonicos |
| sonicwall | sonicos |
| sonicwall | nsa_2700 |
| sonicwall | nsa_3700 |
| sonicwall | nsa_4700 |
| sonicwall | nsa_5700 |
| sonicwall | nsa_6700 |
| sonicwall | nssp_10700 |
| sonicwall | nssp_11700 |
| sonicwall | nssp_13700 |
| sonicwall | nssp_15700 |
| sonicwall | nsv_270 |
| sonicwall | nsv_470 |
| sonicwall | nsv_870 |
| sonicwall | tz270 |
| sonicwall | tz270w |
| sonicwall | tz370 |
| sonicwall | tz370w |
| sonicwall | tz470 |
| sonicwall | tz470w |
| sonicwall | tz570 |
| sonicwall | tz570p |
| sonicwall | tz570w |
| sonicwall | tz670 |
| sonicwall | sonicos |
| sonicwall | nsa_2800 |
| sonicwall | nsa_3800 |
| sonicwall | nsa_4800 |
| sonicwall | nsa_5800 |
| sonicwall | tz280 |
| sonicwall | tz280w |
| sonicwall | tz380 |
| sonicwall | tz380w |
| sonicwall | tz480 |
| sonicwall | tz580 |
| sonicwall | tz680 |
| sonicwall | tz80 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-0205? +
How severe is CVE-2026-0205? +
What products are affected by CVE-2026-0205? +
How do I check if I'm vulnerable to CVE-2026-0205? +
Related Vulnerabilities
Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for …
A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not …
Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046.
DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability
`oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. …
The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path …