First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-0205

MediumCVSS 6.8/10Last modified Nov 9, 2026

Description

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
SonicWall	SonicOS	6.5.5.1-6n and older versions; 7.0.1-5169 and older versions; 7.3.1-7013 and older versions; 8.1.0-8017 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004Vendor Advisory

Timeline

Published: Apr 29, 2026
Last modified: Nov 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-02064.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.CVE-2026-02078.5A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.CVE-2026-02096.9Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.CVE-2026-02277.5A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall CVE-2026-02281.3An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired CVE-2026-02296.6A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauth CVE-2026-02304.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.CVE-2026-02315.7An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensit CVE-2026-02324.4A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable CVE-2026-02338.8A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated atta CVE-2026-02349.1An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Mi CVE-2026-02354.7A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access