# CVE-2026-0204: A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be… Source: https://junglewise.ai/threats/cve-2026-0204-a-vulnerability-in-the-access-control-mechanism-of-sonicos-may Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-04-29 License: CC BY 4.0 with a link back CVE-2026-0204 · Severity: high · CVSS 8 · Published 2026-04-29 A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. Technologies: [SonicWall Nsa 2650](https://junglewise.ai/threats/technologies/nsa-2650), [SonicWall Nsa 2700](https://junglewise.ai/threats/technologies/nsa-2700), [SonicWall Nsa 2800](https://junglewise.ai/threats/technologies/nsa-2800), [SonicWall Nsa 3600](https://junglewise.ai/threats/technologies/nsa-3600), [SonicWall Nsa 3650](https://junglewise.ai/threats/technologies/nsa-3650), [SonicWall Nsa 3700](https://junglewise.ai/threats/technologies/nsa-3700), [SonicWall Nsa 3800](https://junglewise.ai/threats/technologies/nsa-3800), [SonicWall Nsa 4600](https://junglewise.ai/threats/technologies/nsa-4600), [SonicWall Nsa 4650](https://junglewise.ai/threats/technologies/nsa-4650), [SonicWall Nsa 4700](https://junglewise.ai/threats/technologies/nsa-4700), [SonicWall Nsa 4800](https://junglewise.ai/threats/technologies/nsa-4800), [SonicWall Nsa 5600](https://junglewise.ai/threats/technologies/nsa-5600), [SonicWall Nsa 5650](https://junglewise.ai/threats/technologies/nsa-5650), [SonicWall Nsa 5700](https://junglewise.ai/threats/technologies/nsa-5700), [SonicWall Nsa 5800](https://junglewise.ai/threats/technologies/nsa-5800), [SonicWall Nsa 6600](https://junglewise.ai/threats/technologies/nsa-6600), [SonicWall Nsa 6650](https://junglewise.ai/threats/technologies/nsa-6650), [SonicWall Nsa 6700](https://junglewise.ai/threats/technologies/nsa-6700), [SonicWall Nssp 10700](https://junglewise.ai/threats/technologies/nssp-10700), [SonicWall Nssp 11700](https://junglewise.ai/threats/technologies/nssp-11700), [SonicWall Nssp 13700](https://junglewise.ai/threats/technologies/nssp-13700), [SonicWall Nssp 15700](https://junglewise.ai/threats/technologies/nssp-15700), [SonicWall Nsv 270](https://junglewise.ai/threats/technologies/nsv-270), [SonicWall Nsv 470](https://junglewise.ai/threats/technologies/nsv-470), [SonicWall Nsv 870](https://junglewise.ai/threats/technologies/nsv-870), [SonicWall Sm 9200](https://junglewise.ai/threats/technologies/sm-9200), [SonicWall Sm 9250](https://junglewise.ai/threats/technologies/sm-9250), [SonicWall Sm 9400](https://junglewise.ai/threats/technologies/sm-9400), [SonicWall Sm 9450](https://junglewise.ai/threats/technologies/sm-9450), [SonicWall Sm 9600](https://junglewise.ai/threats/technologies/sm-9600), [SonicWall Sm 9650](https://junglewise.ai/threats/technologies/sm-9650), [SonicWall Soho 250](https://junglewise.ai/threats/technologies/soho-250), [SonicWall Soho 250w](https://junglewise.ai/threats/technologies/soho-250w), [SonicWall Sohow](https://junglewise.ai/threats/technologies/sohow), [SonicWall SonicOS](https://junglewise.ai/threats/technologies/sonicos), [SonicWall Tz 300](https://junglewise.ai/threats/technologies/tz-300), [SonicWall Tz 300p](https://junglewise.ai/threats/technologies/tz-300p), [SonicWall Tz 300w](https://junglewise.ai/threats/technologies/tz-300w), [SonicWall Tz 350](https://junglewise.ai/threats/technologies/tz-350), [SonicWall Tz 350w](https://junglewise.ai/threats/technologies/tz-350w), [SonicWall Tz 400](https://junglewise.ai/threats/technologies/tz-400), [SonicWall Tz 400w](https://junglewise.ai/threats/technologies/tz-400w), [SonicWall Tz 500](https://junglewise.ai/threats/technologies/tz-500), [SonicWall Tz 500w](https://junglewise.ai/threats/technologies/tz-500w), [SonicWall Tz 600](https://junglewise.ai/threats/technologies/tz-600), [SonicWall Tz 600p](https://junglewise.ai/threats/technologies/tz-600p), [SonicWall Tz270](https://junglewise.ai/threats/technologies/tz270), [SonicWall Tz270w](https://junglewise.ai/threats/technologies/tz270w), [SonicWall Tz280](https://junglewise.ai/threats/technologies/tz280), [SonicWall Tz280w](https://junglewise.ai/threats/technologies/tz280w), [SonicWall Tz370](https://junglewise.ai/threats/technologies/tz370), [SonicWall Tz370w](https://junglewise.ai/threats/technologies/tz370w), [SonicWall Tz380](https://junglewise.ai/threats/technologies/tz380), [SonicWall Tz380w](https://junglewise.ai/threats/technologies/tz380w), [SonicWall Tz470](https://junglewise.ai/threats/technologies/tz470), [SonicWall Tz470w](https://junglewise.ai/threats/technologies/tz470w), [SonicWall Tz480](https://junglewise.ai/threats/technologies/tz480), [SonicWall Tz570](https://junglewise.ai/threats/technologies/tz570), [SonicWall Tz570p](https://junglewise.ai/threats/technologies/tz570p), [SonicWall Tz570w](https://junglewise.ai/threats/technologies/tz570w), [SonicWall Tz580](https://junglewise.ai/threats/technologies/tz580), [SonicWall Tz670](https://junglewise.ai/threats/technologies/tz670), [SonicWall Tz680](https://junglewise.ai/threats/technologies/tz680), [SonicWall Tz80](https://junglewise.ai/threats/technologies/tz80). Vendors: [SonicWall](https://junglewise.ai/threats/vendors/sonicwall). ## Quick answers **Is CVE-2026-0204 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0204 being exploited in the wild. **How severe is CVE-2026-0204?** High severity, with a CVSS score of 8, published 29 April 2026. **Which products and versions are affected?** SonicWall Nsa 2650, SonicWall Nsa 2700, SonicWall Nsa 2800, SonicWall Nsa 3600 and 60 more. The advisory does not name versions. **Is there a fix for CVE-2026-0204?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-0204?** Check whether you run SonicWall Nsa 2650, SonicWall Nsa 2700, SonicWall Nsa 2800 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - SonicWall Nsa 2650 - SonicWall Nsa 2700 - SonicWall Nsa 2800 - SonicWall Nsa 3600 - SonicWall Nsa 3650 - SonicWall Nsa 3700 - SonicWall Nsa 3800 - SonicWall Nsa 4600 - SonicWall Nsa 4650 - SonicWall Nsa 4700 - SonicWall Nsa 4800 - SonicWall Nsa 5600 - SonicWall Nsa 5650 - SonicWall Nsa 5700 - SonicWall Nsa 5800 - SonicWall Nsa 6600 - SonicWall Nsa 6650 - SonicWall Nsa 6700 - SonicWall Nssp 10700 - SonicWall Nssp 11700 - SonicWall Nssp 13700 - SonicWall Nssp 15700 - SonicWall Nsv 270 - SonicWall Nsv 470 - SonicWall Nsv 870 - SonicWall Sm 9200 - SonicWall Sm 9250 - SonicWall Sm 9400 - SonicWall Sm 9450 - SonicWall Sm 9600 - SonicWall Sm 9650 - SonicWall Soho 250 - SonicWall Soho 250w - SonicWall Sohow - SonicWall SonicOS - SonicWall Tz 300 - SonicWall Tz 300p - SonicWall Tz 300w - SonicWall Tz 350 - SonicWall Tz 350w - SonicWall Tz 400 - SonicWall Tz 400w - SonicWall Tz 500 - SonicWall Tz 500w - SonicWall Tz 600 - SonicWall Tz 600p - SonicWall Tz270 - SonicWall Tz270w - SonicWall Tz280 - SonicWall Tz280w - SonicWall Tz370 - SonicWall Tz370w - SonicWall Tz380 - SonicWall Tz380w - SonicWall Tz470 - SonicWall Tz470w - SonicWall Tz480 - SonicWall Tz570 - SonicWall Tz570p - SonicWall Tz570w - SonicWall Tz580 - SonicWall Tz670 - SonicWall Tz680 - SonicWall Tz80 ## Related threats - [SonicWall SonicOS heap-based buffer overflow in SSL-VPN](https://junglewise.ai/threats/cve-2026-82308-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has) - [SonicWall SonicOS heap buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77709-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has) - [SonicWall SonicOS stack-based buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77708-a-pre-authentication-stack-based-buffer-overflow-vulnerability) - [SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) - [SonicWall SonicOS weak password hashing](https://junglewise.ai/threats/cve-2026-19703-a-weak-password-hashing-vulnerability-has-been-identified-on)