SonicWall Gen6/7/8 Multiple Vulnerabilities Advisory (CVE-2026-0204/0205/0206)

SonicWall Multiple Vulnerabilities Security Advisory Summary Vulnerability Overview Advisory ID: SNWID-2026-0004 Release Date: 2026-04-29 CVSS Score: 8.0 Vulnerability Details: 1. CVE-2026-0204: Improper access control. Under specific conditions, management interface functions can be accessed. 2. CVE-2026-0205: Path traversal. An attacker can exploit this vulnerability to interact with services that are normally restricted. 3. CVE-2026-0206: Stack overflow. An attacker can exploit this vulnerability to cause the firewall to crash. Affected Scope Affected Platforms: Gen6 Hardware Firewalls (SOHO, T200, T2300, T2400, T2400W, T2500, T2500W, T2600, NSA 2650, NSA 3600, NSA 3650, NSA 4600, NSA 4650, NSA 5600, NSA 5650, NSA 6600, NSA 6650, NSA 9200, SM 9250, SM 9400, SM 9450, SM 9600, SM 9650, T2300P, T2600P, SOHO 250, SOHO 250VA, T2350, T2350W) Gen7 NSv / NSv 270 / NSv 470 / NSv 870 Gen7 Firewalls (TZ270, TZ270W, TZ370, TZ370W, TZ470, TZ470W, TZ570, TZ570W, TZ570P, TZ670, NSA 2700, NSA 3700, NSA 4700, NSA 5700, NSA 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700) Gen8 Firewalls (TZ80, TZ280, TZ380, TZ480, TZ580, TZ680, NSA 2800, NSA 3800, NSA 4800, NSA 5800) Affected Versions: Gen6: 6.5.5.1-6n and earlier Gen7: 7.0.1-5169 and earlier; 7.3.1-7013 and earlier Gen8: 8.1.0-8017 and earlier Remediation Measures Temporary Workarounds: Disable firewall management access, disable HTTPS management, disable SSLVPN, restrict SSH access. Fixed Versions: Gen6: 6.5.5.2-28n Gen7: 7.3.2-7010 Gen8: 8.2.0-8009 Downgrade Warning**: Downgrading from 6.5.5.2-28n to any earlier firmware version is unsupported and may result in loss of LDAP users and MFA settings.

Goal Reached Thanks to every supporter — we hit 100%!

SonicWall Gen6/7/8 Multiple Vulnerabilities Advisory (CVE-2026-0204/0205/0206)