What the vulnerability does

01Description

Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.

Key dates

02Disclosure timeline

February 24, 2026 CVE published
February 24, 2026 Record updated