Vulnerability · Published Aug 7, 2026 · Assigned by sonicwall
CVE-2026-66151
Medium 5.5
In plain English
A medium-severity out-of-bounds read in Global VPN Client from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 95.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Global VPN Client | 4.10.8.1108 and earlier versions |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0010 vendor-advisory