8.8
High
CVE-2026-96540 An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem…
Description
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Network Security Manager (NSM) | Versions not published |
Other CVEs of Network Security Manager (NSM)
The 5 CVEs of Network Security Manager (NSM) →
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
7.2
High
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing…
9.1
Critical
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface…
9.1
Critical
CVE-2026-78327
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the…
9.1
Critical