CVE-2026-66151

Published Aug 7, 2026

Last updated 13 days ago

CVSS medium 5.5
Sonicwall

Overview

Description
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
Source
PSIRT@sonicwall.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

PSIRT@sonicwall.com
CWE-125

Social media

Hype score
Not currently trending

Related CVEs

  1. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-83548
  2. SonicWall SMA1000 Appliances OS Command Injection Vulnerability•CVE-2026-83549
  3. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-15409
  4. SonicWall SMA1000 Appliances Code Injection Vulnerability•CVE-2026-15410
  5. A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.•CVE-2026-0204

References

Sources include official advisories and independent security research.