CVE-2026-3439
Full vulnerability record from the local CVENow database.
Description
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.
Severity
MEDIUM
CVSS score
4.9
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-03-04 10:16:08.150000
Last modified
2026-11-09 14:48:14.190000
View original CVE JSON
{
"id": "CVE-2026-3439",
"sourceIdentifier": "[email protected]",
"published": "2026-03-04T10:16:08.150",
"lastModified": "2026-11-09T14:48:14.190",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall."
},
{
"lang": "es",
"value": "Una vulnerabilidad de desbordamiento de búfer basado en pila post-autenticación en el manejo de certificados de SonicOS permite a un atacante remoto colapsar un cortafuegos."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SonicWall",
"product": "SonicOS",
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Gen7",
"Gen8"
],
"versions": [
{
"version": "7.0.1-5169 and older versions",
"status": "affected"
},
{
"version": "7.3.1-7013 and older versions",
"status": "affected"
},
{
"version": "8.1.0-8017 and older versions",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-03-04T16:05:44.553615Z",
"id": "CVE-2026-3439",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.3.2-7010",
"matchCriteriaId": "C263643A-0274-47CF-881F-59CEF6B8A20A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50F3A318-F082-4BDD-80EA-51DB15D3458C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*",
"matchCriteriaId": "09CAD976-F02B-40D6-9584-B8146A5A2EA1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A69E000B-5806-46FD-A233-4E2CC9DD38D2"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C15FED5-C48C-47CF-9645-0563D77883C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6739DEA3-06FF-4FEB-9931-0DB27F63B70E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7D6CF3CF-256C-4C04-8BDF-B16398CD0459"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70340DD4-687B-402C-85AF-C2B80D0F1600"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "52847BA2-470B-4078-A79B-52095DB9214B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4DBDD10C-F89D-4051-BC70-67B41167FF9B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C23940E-2F9D-447B-A740-42035ED5D400"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "90C790AD-C40E-4527-8F83-D278282A9600"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "352DFCF9-E333-41C0-8033-91265768FD8E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4C882C38-9DA5-4C03-BB23-AB2B448E3307"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.2.0-8009",
"matchCriteriaId": "C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*",
"matchCriteriaId": "559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3ED8014A-C7A4-4624-8D50-A9844871C1B6"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D28BF416-D019-438B-954E-FB94697DC011"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*",
"matchCriteriaId": "56EC904E-4FCA-4B35-B188-639AE688DD14"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83B9556B-0A33-4A27-B9E2-00F47969A566"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DCFE3403-6A5B-4735-9248-99297A2E4461"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE6BC579-21A1-4C2F-B655-73B14C3409A7"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*",
"matchCriteriaId": "129CC10F-E822-4BF7-9EB5-0D702020CB0C"
}
]
}
]
}
],
"references": [
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}