CVE-2026-96540: SonicWall Network Security Manager (NSM) vulnerability
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require prior access to the NSM instance?
Yes. The vulnerability is exploitable by a remote authenticated attacker, so the attacker must have valid authentication to the affected NSM on-prem instance.
Which deployments are in scope?
The reported affected product is SonicWall Network Security Manager (NSM) on-prem. The available information does not identify affected versions or configurations.
What could a successful attacker achieve?
A successful attacker may obtain sensitive information. The issue may also enable escalation to an administrator role or interception of communications from other users of the NSM instance.