CVE-2024-40766CISA KEVEPSS p96.4%

CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability

SonicWall / SonicOS

Description

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

Scoring

EPSS15.69% probability of exploitation · percentile 96.4% · 2026-06-18T12:00:27Z

CISA KEV entry

Added to KEV: 2024-09-09

(incoming)1

TypeTargetConfidenceTier
KEVEntrySonicWall SonicOS Improper Access Control Vulnerabilitykev-cve-2024-407660%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-0204
CVE
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVE
SonicWall SMA1000 Missing Authorization Vulnerability
CVE
SonicWall SonicOS Buffer Overflow Vulnerability
CVE
CVE-2025-40600
CVE
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.