Heap-based Buffer Overflow in SonicOS TACACS+ Authentication Client
CVE-2026-77709

5.9MEDIUM

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-77709?

A heap-based buffer overflow vulnerability has been discovered in the SonicOS TACACS+ authentication client. When exploited under specific conditions, this flaw may allow a remote attacker, without authentication, to trigger an application-level denial of service, disrupting normal operations.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matei "Mal" Badanoiu of Pentest-Tools.com
.