SonicWall Product Security Update Advisory

SonicWall has released a security update that addresses several vulnerabilities in the SonicOS product family.

• The affected products are SonicOS Gen7 Hardware Firewalls, SonicOS Gen7 NSv, SonicOS Gen8 Hardware Firewalls, and SonicOS Gen8 NSv.
• Affected Versions include SonicOS Gen7 Hardware Firewalls and Gen7 NSv versions 7.3.3-7015 and earlier, and SonicOS Gen8 Hardware Firewalls and Gen8 NSv versions 8.2.2-8015 and earlier.
• The vulnerabilities that have been addressed are CVE-2026-19703, CVE-2026-19868, CVE-2026-77708, CVE-2026-77709, CVE-2026-82308, CVE-2026-107154, and CVE-2026-107155.
• CVE-2026-19703 is a vulnerable password hashing vulnerability in the SonicOS virtual appliance. – CVE-2026-19868 is an authentication enforcement vulnerability in the SonicOS SSL-VPN Service.
• CVE-2026-77708 is a pre-authentication stack-based buffer overflow vulnerability in the SonicOS TACACS+ authentication client.
• CVE-2026-77709 is a pre-authentication stack-based buffer overflow vulnerability in the SonicOS TACACS+ authentication client.
• CVE-2026-82308 is a pre-authentication heap-based buffer overflow vulnerability in the SonicOS SSL-VPN Service. – CVE-2026-107154 is a session validation vulnerability in the SonicOS management interface.
• CVE-2026-107155 is a permissive cross-domain security policy configuration vulnerability in the SonicOS management interface.
• SonicWall has provided patches via the latest updates; SonicOS Gen7 Hardware Firewalls and Gen7 NSv must be updated to version 7.3.4-7013 or later, and SonicOS Gen8 Hardware Firewalls and Gen8 NSv must be updated to version 8.2.3-8015 or later.