CVE advisoryCRITICAL
CVE-2025-40600
SonicWall SonicOS SSL VPN Format String Vulnerability Causes Service Disruption
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A format string vulnerability in the SonicOS SSL VPN interface allows remote, unauthenticated attackers to cause service disruption. If this technology is in use, it could impact remote access capabilities. Further investigation is needed to determine if the organization is affected.