<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: SonicWall SonicOS</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/sonicwall-sonicos.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-82308: A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a rem</title><link>https://vulnfeed.org/cve/CVE-2026-82308/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-82308/</guid><pubDate>Fri, 06 Nov 2026 19:17:57 +0000</pubDate><description>A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.</description></item><item><title>CVE-2026-107154: A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a re</title><link>https://vulnfeed.org/cve/CVE-2026-107154/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-107154/</guid><pubDate>Fri, 06 Nov 2026 19:17:06 +0000</pubDate><description>A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.</description></item><item><title>CVE-2026-107155: A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially</title><link>https://vulnfeed.org/cve/CVE-2026-107155/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-107155/</guid><pubDate>Fri, 06 Nov 2026 19:17:06 +0000</pubDate><description>A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.</description></item></channel></rss>
