CVE-2026-100232

7.2 Élevée

Publiée le 14/10/2026 à 23:17 · Modifiée le 15/10/2026 à 22:38 · En attente d'analyse NVD · Source : PSIRT@sonicwall.com

Description

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.

Traduire en français

Produits concernés

SonicWall Network Security Manager (NSM)

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.2 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories