CVE-2024-40766
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
4/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
CISA Known Exploited Vulnerability
Vendor / Product
SonicWall — SonicOS
Date Added
2024-09-09
Remediation Due
2024-09-30
Ransomware Use
CONFIRMED
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015; https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40766
Weakness Classification (1)
Affected Software (4)
References & Advisories (2)
Vendor Advisory
US Government Resource