CVE-2026-66151 - SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash

Back Back to CVE browser

MEDIUM

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash

Published Aug 7, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.

Affected products

Vendor SonicWall Product Global VPN Client Default
n/a
- Version
  4.10.8.1108 and earlier versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SonicWall

Global VPN Client

n/a

Version	Status	Constraints
4.10.8.1108 and earlier versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0010
vendor-advisory

Link	Providers	Tags
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0010		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sonicwall

Published Aug 7, 2026

Updated Aug 11, 2026

Reserved Jul 24, 2026

Link CVE-2026-66151

CISA Vulnrichment

Updated Aug 11, 2026

NVD

Status Awaiting Analysis

Modified Aug 28, 2026

Link CVE-2026-66151

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-66151