CVE-2026-96540
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings. A remote authenticated attacker could obtain sensitive information, potentially escalating privileges to administrator or intercepting communications of other NSM instance users.
Risk Assessment
An attacker with a valid account could access sensitive data, escalate privileges to administrator level, or eavesdrop on other users' communications, leading to a serious breach of confidentiality and system integrity.
Recommendation
Immediately apply available security updates for SonicWall NSM on-prem and restrict access to the management interface to trusted networks and users only.
Other vulnerabilities in SonicWall Network Security Manager
Original NVD description (English source)
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS