Browse CVEs

CRITICAL 9.8 CVE-2026-4149 Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary … Era 300 Firmware 83.1-61240+ Fix from $2,3002026-04-11 HIGH 8.8 CVE-2025-1051 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… Era 300 Firmware Mitigation only Fix from $1,9502025-06-02 HIGH 8.8 CVE-2025-1050 Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code… S2 83.1-61240+ Fix from $1,9502025-04-23 HIGH 8.8 CVE-2025-1048 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb… S1 57.22-61162 / 83.1-61240+ Fix from $1,9502025-04-23 HIGH 8.8 CVE-2025-1049 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… S1 57.22-61162 / 83.1-61240+ Fix from $1,9502025-04-23 HIGH 8.8 CVE-2024-5267 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to … Era 100 Firmware Mitigation only Fix from $1,9502024-06-06 HIGH 8.8 CVE-2024-5269 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu… Era 100 Firmware Mitigation only Fix from $1,9502024-06-06 MEDIUM 6.5 CVE-2024-5268 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to … Era 100 Firmware Mitigation only Fix from $1,6002024-06-06 HIGH 8.8 CVE-2023-27352 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authenticat… One Firmware 11.7.1 / 15.1+ Fix from $1,9502023-04-20 HIGH 8.8 CVE-2023-27355 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authenticat… One Firmware 11.7.1 / 15.1+ Fix from $1,9502023-04-20 MEDIUM 6.5 CVE-2023-27353 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Aut… One Firmware 11.7.1 / 15.1+ Fix from $1,6002023-04-20 MEDIUM 6.5 CVE-2023-27354 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Aut… One Firmware 11.7.1 / 15.1+ Fix from $1,6002023-04-20 MEDIUM 6.8 CVE-2020-9285 Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the … One Firmware No fix yet Fix from $1,6002022-10-20 CRITICAL 9.8 CVE-2022-24049EPSS 7% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 1… S1 3.4.1 / 11.2.13+ Fix from $2,3002022-02-18 HIGH 8.8 CVE-2022-24046 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 syst… S1 3.4.1 / 11.2.13+ Fix from $1,9502022-02-18 CRITICAL 9.6 CVE-2018-11316 The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device contro… Sonos Firmware Mitigation only Fix from $2,3002018-07-03