SonicOS Access Control Bypass (CVE-2026-0204) Rated High Severity

The National Vulnerability Database has disclosed CVE-2026-0204, a high-severity vulnerability impacting SonicOS. This flaw, rated 8.0 CVSSv3.1, stems from an access control mechanism weakness that could expose certain management interface functions under specific, undefined conditions. While specific affected products are not detailed, the risk lies in unauthorized access to critical network device controls.

Attackers exploiting this vulnerability could gain significant control over SonicWall devices, potentially leading to full compromise. The CVSS vector AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H indicates that while physical proximity or network adjacency (AV:A) and user interaction (UI:R) are required, the attack complexity is low (AC:L) and no privileges are needed (PR:N). A successful exploit could result in high confidentiality, integrity, and availability impacts.

This is a critical flaw for organizations relying on SonicWall firewalls. The lack of specific product details from the National Vulnerability Database means defenders must assume broad exposure across SonicOS versions. This type of vulnerability is a direct path to network perimeter compromise, allowing attackers to bypass security controls and establish persistence.