Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: SonicWall
Product: SonicOS
EPSS: 0.953 (99.9th percentile, 2026-10-30)
Known ransomware use: Known
SonicWall SonicOS is affected by a flaw that lets a remote attacker bypass authentication in the SSLVPN authentication mechanism. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-02-18, and it is known to be used by ransomware.
Reviewed by PerimeterClock.
| Date | Event | Source |
|---|---|---|
| 2025-02-18 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.