CVE-2026-66151

Published Aug 7, 2026

Last updated 16 days ago

CVSS medium 5.5
Sonicwall

Overview

Description
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
Source
PSIRT@sonicwall.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

PSIRT@sonicwall.com
CWE-125

Social media

Hype score
Not currently trending

Related CVEs

  1. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.•CVE-2026-102255
  2. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-83548
  3. SonicWall SMA1000 Appliances OS Command Injection Vulnerability•CVE-2026-83549
  4. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-15409
  5. SonicWall SMA1000 Appliances Code Injection Vulnerability•CVE-2026-15410

References

Sources include official advisories and independent security research.