{"id":"CVE-2026-19703","kind":"vulnerability","aliases":["CVE-2026-19703"],"related":[],"title":"SonicWall SonicOS virtual appliances: weak password hashing exposes a platform credential","description":"A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings.","summary":"SonicOS virtual appliances use a weak password hash that, under specific conditions, can be exploited by an attacker who already has local access to disclose a platform credential. That credential grants access to a limited subset of platform settings.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firewall","infrastructure","sonicos","sonicwall","virtual-appliance"],"not_affected_if":["no-local-access-risk"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-06T19:17:48+00:00","first_seen_at":"2026-11-06T19:43:48+00:00","triaged_at":"2026-11-06T19:46:15+00:00","updated_at":"2026-11-06T19:46:15+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-06T19:46:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"SonicWall SonicOS virtual appliances: weak password hashing exposes a platform credential","impact":"medium","summary":"SonicOS virtual appliances use a weak password hash that, under specific conditions, can be exploited by an attacker who already has local access to disclose a platform credential. That credential grants access to a limited subset of platform settings.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["sonicwall","sonicos","virtual-appliance","firewall"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker discloses a platform credential granting limited settings access","analyst_note":"Check the SonicWall security advisory for affected SonicOS versions, the specific conditions, and the fixed release; NVD entry lacks detail.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-local-access-risk"],"who_is_affected":"Teams running SonicWall SonicOS virtual appliances (virtual firewalls) in the specific conditions the advisory describes, which the sources do not spell out. Exposure requires an attacker with existing local access, so appliances without untrusted local users are less exposed. unknown for the exact configuration.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000664,"input_tokens":4193,"output_tokens":489,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-19703':14A,17A '-2026':13A,16A 'access':47B,56B,88C,97C 'alreadi':44B 'applianc':4A,24B,27B,75C 'attack':42B,84C 'condit':36B,79C 'could':80C 'credenti':11A,52B,54B,93C,95C 'cve':12A,15A 'disclos':49B,90C 'enabl':82C 'exist':86C 'exploit':39B 'expos':8A 'firewal':18B 'grant':55B 'hash':7A,32B,67C 'identifi':71C 'infrastructur':19B 'limit':59B,100C 'local':46B,87C 'password':6A,31B,66C 'platform':10A,51B,62B,92C,103C 'potenti':81C 'provid':96C 'set':63B,104C 'sonico':2A,20B,25B,73C 'sonicwal':1A,21B 'specif':35B,78C 'subset':60B,101C 'use':28B 'virtual':3A,23B,26B,74C 'virtual-appli':22B 'vulner':68C 'weak':5A,30B,65C","nicknames":[],"mitigations":[],"who_affected":"Teams running SonicWall SonicOS virtual appliances (virtual firewalls) in the specific conditions the advisory describes, which the sources do not spell out. Exposure requires an attacker with existing local access, so appliances without untrusted local users are less exposed. unknown for the exact configuration.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["firewall","infrastructure","sonicos","sonicwall","unknown","virtualappliance"],"campaign_type":null,"search_a":"'-19703':14A,17A '-2026':13A,16A 'applianc':4A 'credenti':11A 'cve':12A,15A 'expos':8A 'hash':7A 'password':6A 'platform':10A 'sonico':2A 'sonicwal':1A 'virtual':3A 'weak':5A","search_b":"'access':47B,56B 'alreadi':44B 'applianc':24B,27B 'attack':42B 'condit':36B 'credenti':52B,54B 'disclos':49B 'exploit':39B 'firewal':18B 'grant':55B 'hash':32B 'infrastructur':19B 'limit':59B 'local':46B 'password':31B 'platform':51B,62B 'set':63B 'sonico':20B,25B 'sonicwal':21B 'specif':35B 'subset':60B 'use':28B 'virtual':23B,26B 'virtual-appli':22B 'weak':30B","search_c":"'access':88C,97C 'applianc':75C 'attack':84C 'condit':79C 'could':80C 'credenti':93C,95C 'disclos':90C 'enabl':82C 'exist':86C 'hash':67C 'identifi':71C 'limit':100C 'local':87C 'password':66C 'platform':92C,103C 'potenti':81C 'provid':96C 'set':104C 'sonico':73C 'specif':78C 'subset':101C 'virtual':74C 'vulner':68C 'weak':65C","first_public_at":"2026-11-06T19:17:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-19703","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19703","severity":null,"published_at":"2026-11-06T19:17:48+00:00","modified_at":"2026-11-06T19:17:48+00:00","first_seen_at":"2026-11-06T19:43:48+00:00","fetched_at":"2026-11-06T19:43:48+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}