CVE-2024-40766CISA KEVEPSS p97.2%

CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability

SonicWall / SonicOS

Description

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

Scoring

CVSS 9.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS18.38% probability of exploitation · percentile 97.2% · 2026-10-03T12:00:21Z
Last modified2026-09-21

CISA KEV entry

Added to KEV: 2024-09-09

(incoming)1

TypeTargetConfidenceTier
KEVEntrySonicWall SonicOS Improper Access Control Vulnerabilitykev-cve-2024-407660%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-0204
CVE
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVE
SonicWall SMA1000 Missing Authorization Vulnerability
CVE
SonicWall SonicOS Buffer Overflow Vulnerability
CVE
CVE-2025-40600
CVE
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.