#sonicwall

Analysis · May 25, 2026 · Colten Anderson

SonicWall patched CVE-2024-12802 and left the bug in place on Gen6

The firmware update closes the code path but does not rewrite the LDAP config the exploit actually uses. On Gen6, that distinction is the whole vulnerability.