CVEvulnerability
CVE-2026-96540
8.8 HIGH
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-14
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-863
Description
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018 psirt.global.sonicwall.com