Stack-Based Buffer Overflow in SonicWall SonicOS TACACS+ Authentication Client
CVE-2026-77708

5.9MEDIUM

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-77708?

A stack-based buffer overflow vulnerability exists in the TACACS+ authentication client of SonicWall SonicOS. If exploited under certain conditions, this vulnerability allows a remote unauthenticated attacker to trigger an application level denial of service, potentially disrupting the authentication services that depend on this client. It is crucial for users to assess their current SonicOS version and implement recommended security measures to mitigate risks.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matei "Mal" Badanoiu of Pentest-Tools.com
.