SonicWall Urges Immediate Patching of Firewall Vulnerabilities
Source SecurityWeek
Mentioned vulnerabilities
Rated High by SecurityWeek
Data as of 30 Apr 2026, 15:06 UTC
What to do
AI-suggested
SonicWall has released official firmware updates that fix these vulnerabilities. Customers should immediately apply the patched firmware versions 6.5.5.2-28n, 7.3.2-7010, or 8.2.0-8009 depending on their device. Until patching is possible, SonicWall recommends restricting management access to SSH only by disabling HTTP/HTTPS-based management and SSLVPN on all interfaces. These access restrictions are temporary mitigations and should be replaced by applying the official patches as soon as possible.
Description
SonicWall has released patches for three vulnerabilities in its Gen 6, Gen 7, and Gen 8 firewalls. The vulnerabilities include one high-severity flaw (CVE-2026-0204) that allows bypassing access controls to the management interface, and two medium-severity issues (CVE-2026-0205 and CVE-2026-0206) involving path traversal and denial-of-service via crashing the firewall. The medium-severity flaws require authentication to exploit. SonicWall urges immediate firmware updates to address these issues and recommends temporary management access restrictions until patching is completed. No exploitation in the wild has been reported.