Stack-based Buffer Overflow in SonicWall Firewall Certificate Handling
CVE-2026-3439

4.9MEDIUM

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
4 March 2026

What is CVE-2026-3439?

A stack-based buffer overflow vulnerability in the certificate handling process of SonicOS enables a remote attacker to exploit this flaw post-authentication, potentially leading to denial of service by crashing the firewall. This vulnerability poses significant risks for the security and reliability of network operations.

Affected Version(s)

SonicOS Linux 7.0.1-5169 and older versions

SonicOS Linux 7.3.1-7013 and older versions

SonicOS Linux 8.1.0-8017 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.