ByteOS Network

Vulnerability Details :

CVE-2026-0204

Assigner Org ID-44b2ff79-1416-4492-88bb-ed0da00c7315

Published At-29 Apr, 2026 | 16:15

Updated At-30 Apr, 2026 | 03:55

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:sonicwall

Assigner Org ID:44b2ff79-1416-4492-88bb-ed0da00c7315

Published At:29 Apr, 2026 | 16:15

Updated At:30 Apr, 2026 | 03:55

▼CVE Numbering Authority (CNA)

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

Affected Products

Vendor

SonicWall Inc.

Product

SonicOS

Platforms

Linux
Gen6
Gen7
Gen8

Default Status

unknown

Versions

Affected

6.5.5.1-6n and older versions
7.0.1-5169 and older versions
7.3.1-7013 and older versions
8.1.0-8017 and older versions

Problem Types

Type	CWE ID	Description
CWE	CWE-1390	CWE-1390 Weak Authentication
CWE	CWE-306	CWE-306 Missing authentication for critical function

Type: CWE

CWE ID: CWE-1390

Description: CWE-1390 Weak Authentication

Type: CWE

CWE ID: CWE-306

Description: CWE-306 Missing authentication for critical function

References

Hyperlink	Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004	vendor-advisory

Hyperlink: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	8.0	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.0

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:PSIRT@sonicwall.com

Published At:29 Apr, 2026 | 17:16

Updated At:05 May, 2026 | 16:11

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.0	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.0

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

SonicWall Inc.

>>sonicos>>Versions before 6.5.5.2-28n(exclusive)

cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_2650>>-

cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_3600>>-

cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_3650>>-

cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_4600>>-

cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_4650>>-

cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_5600>>-

cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_5650>>-

cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_6600>>-

cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_6650>>-

cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9200>>-

cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9250>>-

cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9400>>-

cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9450>>-

cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9600>>-

cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sm_9650>>-

cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*

SonicWall Inc.

>>soho_250>>-

cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*

SonicWall Inc.

>>soho_250w>>-

cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sohow>>-

cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_300>>-

cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_300p>>-

cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_300w>>-

cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_350>>-

cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_350w>>-

cpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_400>>-

cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_400w>>-

cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_500>>-

cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_500w>>-

cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_600>>-

cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz_600p>>-

cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*

SonicWall Inc.

>>sonicos>>Versions from 7.0.0.0(inclusive) to 7.0.1-5169(inclusive)

cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*

SonicWall Inc.

>>sonicos>>Versions from 7.1.1-7040(inclusive) to 7.3.2-7010(exclusive)

cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_2700>>-

cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_3700>>-

cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_4700>>-

cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_5700>>-

cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsa_6700>>-

cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nssp_10700>>-

cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nssp_11700>>-

cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nssp_13700>>-

cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nssp_15700>>-

cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsv_270>>-

cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsv_470>>-

cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*

SonicWall Inc.

>>nsv_870>>-

cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz270>>-

cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz270w>>-

cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz370>>-

cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz370w>>-

cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz470>>-

cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*

SonicWall Inc.

>>tz470w>>-

cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-306	Primary	PSIRT@sonicwall.com
CWE-1390	Primary	PSIRT@sonicwall.com

CWE ID: CWE-306

Type: Primary

Source: PSIRT@sonicwall.com

CWE ID: CWE-1390

Type: Primary

Source: PSIRT@sonicwall.com

References

Hyperlink	Source	Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004	PSIRT@sonicwall.com	Vendor Advisory

Hyperlink: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

Source: PSIRT@sonicwall.com

Resource:

Vendor Advisory

Similar CVEs

1Records found

CVE-2026-27509

Matching Score-4

Assigner-VulnCheck

View Details

Matching Score-4

Assigner-VulnCheck

CVSS Score-8.5||HIGH

EPSS-0.08% / 22.82%

7 Day CHG~0.00%

Published-26 Feb, 2026 | 18:56

Updated-11 May, 2026 | 23:11

Unitree Go2 Missing DDS Authentication Enables Adjacent RCE

Unitree Go2 firmware versions V1.1.7 through V1.1.9 and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated attacker can join DDS domain 0 and publish a crafted message (api_id=1002) containing arbitrary Python, which the robot writes to disk under /unitree/etc/programming/ and binds to a physical controller keybinding. When the keybinding is pressed, the code executes as root and the binding persists across reboots.

Vendor-unitree UnitreeRobotics

Product-go2_edu_firmware go2_edu go2_firmware go2 Unitree Go2

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2026-0204

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs