CVE-2025-40603

Medium · 4.5

CVSS

4.5

EPSS

0.5%

Published

Oct 31, 2025

CISA due date

—

The record

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.

Affected packages

Ecosystem	Package	Introduced	Fixed