The Center for Internet Security warns that several bugs in SonicWall's SonicOS firewall software could let attackers break in without a password, with one flaw already seen in real-world attacks.
The Center for Internet Security has issued a warning about multiple security flaws in SonicOS, the software that runs SonicWall firewalls and network security devices used by businesses and governments to protect their networks from outside threats.
According to the Center for Internet Security, the most serious of these flaws could let an attacker who isn’t even logged in bypass authentication, the process of proving who you are to access a system. From there, an attacker could change device settings, reach protected data, get around security protections, or disrupt how the device works.
One of the flaws, involving a way attackers could sidestep certain login protections including some multi-factor authentication setups, has already drawn attention from federal authorities. The Cybersecurity and Infrastructure Security Agency added that specific flaw to its catalog of vulnerabilities known to be actively exploited on November 6, 2026, and SonicWall has looked into a report suggesting it may already be under attack, the advisory states.
The affected products are specific generations of SonicWall’s hardware firewalls and virtual appliances, covering certain software versions and earlier. The Center for Internet Security rates the risk as high for government agencies and businesses of all sizes, noting that organizations whose management interfaces, the control panels used to configure these devices, are accessible from the internet face extra exposure. Home users are rated at low risk.
These devices are typically used by organizations rather than individual households, so most everyday readers won’t be directly affected. But the flaws matter because firewalls are meant to be a network’s first line of defense, and a weakness there can expose everything behind it.
The Center for Internet Security recommends that affected organizations apply SonicWall’s available updates to vulnerable systems as soon as possible, after appropriate testing, and continue routine practices like keeping software current and limiting administrative access to only what’s necessary.
Based on a release from Center for Internet Security.
