Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-40600

No fix known EPSS <1%CVSS 9.8

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.

Published 2025-07-29 · CVE record · OSV

Products: sonicwall sonicos