CVE-2024-40766Used in ransomware
SonicWall SonicOS
SonicWall SonicOS Improper Access Control Vulnerability
What it is
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
- www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat
- nvd.nist.gov/vuln/detail/CVE-2024-40766
Description and required action as published by CISA. Full record at NVD.
Other SonicWall entries on the list
- SonicOS SSLVPN SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability CVE-2026-19868 · Nov 6, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-83548 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 · Jul 14, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-15409 · Jul 14, 2026
- SMA1000 appliance SonicWall SMA1000 Missing Authorization Vulnerability CVE-2025-40602 · Dec 17, 2025