CVE-2026-96540

8.8 Élevée

Publiée le 14/10/2026 à 23:17 · Modifiée le 15/10/2026 à 22:38 · En attente d'analyse NVD · Source : PSIRT@sonicwall.com

Description

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

Traduire en français

Produits concernés

SonicWall Network Security Manager (NSM)

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-863

Références

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories