SonicWall NSM On-Prem Affected By Multiple Vulnerabilities

1) CVE-2026-96540 - SonicWall NSM On-Prem Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

CVSS Score: 8.8

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-863: Incorrect Authorization

2) CVE-2026-100232 - SonicWall NSM On-Prem Authenticated OS Command Injection Vulnerability

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.

CVSS Score: 7.2

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-78: Improper Neutralization of Special Elements used in an OS Command

SonicWall strongly advises users of the Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM) to upgrade to the mentioned fixed release version to address these vulnerabilities.

There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild and NSM SaaS versions are not affected by these vulnerabilities.