A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVE-2026-0205
CVSS base score
6.8 (v3.1)
Severity
MEDIUM
Attack vector
Adjacent_network
Weakness
CWE-35
Last modified
November 9, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Affected products
sonicwall sonicos
References
- psirt.global.sonicwall.com Vendor Advisory