Heap-Based Buffer Overflow in SonicWall SSL-VPN Service
CVE-2026-82308

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-82308?

A significant vulnerability has been discovered in the SonicOS SSL-VPN service, characterized by a heap-based buffer overflow. This vulnerability allows remote unauthenticated attackers to exploit the service, potentially leading to application-level denial of service. Given the nature of the issue, it is crucial for organizations utilizing SonicWall's SSL-VPN to implement security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matei "Mal" Badanoiu of Pentest-Tools.com
.