// #sonicwall
3 articles
SonicWall EoL Highlights an Asset Management Gap: Network Equipment Lifecycle Tracking in Enterprise Environments
The SonicWall Generation 6 end-of-life situation reveals a consistent gap in enterprise asset management: network equipment EoL dates are not tracked with the same rigour as software licence renewals or server hardware refresh cycles. Organisations with accurate, proactively managed network equipment lifecycle records have a weeks-to-months advantage in responding to EoL-driven security risks.
SonicWall Gen6 SSL-VPN: Patch for CVE-2024-12802 Fails to Close MFA Bypass — Akira Ransomware in 86% of Compromises
ReliaQuest published research on 19 May confirming that SonicWall's official firmware patch for CVE-2024-12802 on Generation 6 SSL-VPN devices requires six manual reconfiguration steps to fully close the MFA bypass vulnerability. Devices that reached end-of-life on 16 April 2026 will receive no further patches. Akira ransomware is present in 86% of SonicWall-involved intrusion claims reviewed by ReliaQuest.
SonicWall CVE-2026-0204 — Authentication Bypass in SSLVPN Allows Unauthenticated Network Access
SonicWall has disclosed CVE-2026-0204, an authentication bypass vulnerability in the SonicWall SSLVPN product that allows a remote attacker to bypass VPN authentication and gain access to the protected network without valid credentials. SonicWall SSLVPN appliances are widely deployed as enterprise and SMB VPN concentrators. Patch available — update immediately.