Weak Password Hashing Vulnerability in SonicOS Virtual Appliances by SonicWall
CVE-2026-19703

5.1MEDIUM

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-19703?

A weakness in the password hashing mechanisms of SonicOS virtual appliances has been discovered, allowing attackers with existing local access to compromise platform credentials. This vulnerability may lead to unauthorized access to a limited set of platform settings, posing security implications for affected users.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dr. Gianpiero Costantino of Agenzia per la Cybersicurezza Nazionale (ACN)
.