Servers and applications
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.
- Severity
- Medium 5.9
- Published
- 6 Nov 2026
- Last changed
- 6 Nov 2026
- Added to UpHeron
- 6 Nov 2026
- Sources
- CVE Program
Affected software
| Software | Affected versions |
|---|---|
SonicWall SonicOSServers and applications · cna:sonicwall|sonicos |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-77709