Page generated: 09 Nov 2026, 13:35 UTC
← Dashboard

CVE-2024-40766

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, a…

Read full description
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
CVSS 9.3 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.5/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.3: +1.40
  • Fresh EPSS: 18.38%: +0.09

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 31 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

SC Media
Press · 01 May 2026, 07:00 · SonicWall releases firmware updates for three CVEs | news - SC Media
BleepingComputer
Press · 17 Dec 2025, 08:00 · Sonicwall warns of new SMA1000 zero-day exploited in attacks - BleepingComputer
LinkedIn
Press · 12 Oct 2025, 07:00 · WARNING: SonicWall Under Attack Following Breach of All Firewall Backups - LinkedIn
The Hacker News
Press · 11 Oct 2025, 07:00 · Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts - The Hacker News
SecurityWeek
Press · 29 Sep 2025, 07:00 · Akira Ransomware’s Exploitation of SonicWall Vulnerability Continues - SecurityWeek
See all 31 source documents
Help Net Security
Press · 29 Sep 2025, 07:00 · Akira ransomware: From SonicWall VPN login to encryption in under four hours - Help Net Security
Security Affairs
Press · 29 Sep 2025, 07:00 · Akira Ransomware bypasses MFA on SonicWall VPNs - Security Affairs
Arctic Wolf
Press · 26 Sep 2025, 07:00 · September 2025 Update on Aggressive Ongoing Akira Ransomware Campaign - Arctic Wolf
BleepingComputer
Press · 11 Sep 2025, 07:00 · Akira ransomware exploiting critical SonicWall SSLVPN bug again - BleepingComputer
Help Net Security
Press · 11 Sep 2025, 07:00 · Akira ransomware affiliates continue breaching organizations via SonicWall firewalls - Help Net Security
The Hacker News
Press · 11 Sep 2025, 07:00 · SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers - The Hacker News
BleepingComputer
Press · 07 Aug 2025, 07:00 · SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw - BleepingComputer
Cybersecurity Dive
Press · 07 Aug 2025, 07:00 · SonicWall says recent attack wave involved previously disclosed flaw, not zero-day - Cybersecurity Dive
The Hacker News
Press · 07 Aug 2025, 07:00 · SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day - The Hacker News
CERT-FR
Technical advisory · 05 Aug 2025, 00:00 · Incidents de sécurité dans les pare-feux SonicWall (05 août 2025)
CERT-FR
Press · 05 Aug 2025, 00:00 · Incidents de sécurité dans les pare-feux SonicWall (05 août 2025)
The Record from Recorded Future News
Press · 04 Aug 2025, 07:00 · SonicWall: Recent SSLVPN activity not connected to a zero-day vulnerability (Updated) - The Record from Recorded Future News
Arctic Wolf
Press · 22 Jul 2025, 07:00 · Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN - Arctic Wolf
Help Net Security
Press · 27 Jan 2025, 08:00 · 5,000+ SonicWall firewalls still open to attack (CVE-2024-53704) - Help Net Security
Field Effect
Press · 28 Oct 2024, 07:00 · Critical SonicWall vulnerability exploited by ransomware groups - Field Effect
BleepingComputer
Press · 27 Oct 2024, 07:00 · Fog ransomware targets SonicWall VPNs to breach corporate networks - BleepingComputer
Cybersecurity Dive
Press · 10 Sep 2024, 07:00 · SonicWall firewall CVE exploits linked to ransomware attacks - Cybersecurity Dive
CERT-FR
Technical advisory · 10 Sep 2024, 00:00 · Vulnérabilité dans SonicWall (10 septembre 2024)
CERT-FR
Press · 10 Sep 2024, 00:00 · Vulnérabilité dans SonicWall (10 septembre 2024)
Rapid7
Press · 09 Sep 2024, 07:00 · CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices - Rapid7
BleepingComputer
Press · 06 Sep 2024, 07:00 · SonicWall SSLVPN access control flaw is now exploited in attacks - BleepingComputer
SecurityWeek
Press · 06 Sep 2024, 07:00 · Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild - SecurityWeek
The Hacker News
Press · 06 Sep 2024, 07:00 · SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation - The Hacker News
Arctic Wolf
Press · 06 Sep 2024, 07:00 · Arctic Wolf Observes Akira Ransomware Campaign Targeting SonicWall SSLVPN Accounts - Arctic Wolf
Arctic Wolf
Press · 27 Aug 2024, 07:00 · Recommendation for CVE-2024-40766 - Arctic Wolf
The Hacker News
Press · 26 Aug 2024, 07:00 · SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access - The Hacker News

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.5 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.3; EPSS 18.4%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:16.850043+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
23 Aug 2024, 06:19
First press mention
26 Aug 2024, 07:00
Added to the CISA KEV catalog
09 Sep 2024, 00:00
Latest press mention
01 May 2026, 07:00
Score calculated
05 Nov 2026, 13:59