E3
Product
Era 300 Firmware
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
VulnerabilityCritical
ZDI-26-192: Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 10.0. The following CVEs are assigned: CVE-2026-4149.
Mar 16, 2026·Zero Day Initiative