CVE-2026-19703 PUBLISHED

Assigner: sonicwall
Reserved: 13.08.2026 Published: 06.11.2026 Updated: 06.11.2026

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings.

Product Status

Vendor SonicWall
Product SonicOS
Versions Default: unknown
  • Version 7.3.3-7015 and older versions is affected
  • Version 8.2.2-8015 and older versions is affected

Credits

  • Dr. Gianpiero Costantino of Agenzia per la Cybersicurezza Nazionale (ACN) finder

References

Problem Types

  • CWE-798 Use of Hard-coded Credentials CWE