OS Command Injection Vulnerability in SonicWall Network Security Manager
CVE-2026-100232

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
14 October 2026

What is CVE-2026-100232?

A vulnerability exists in SonicWall Network Security Manager that could allow remote authenticated attackers to execute arbitrary OS commands under certain conditions. This improper neutralization of special elements may lead to remote code execution, posing serious risks to network integrity and security. Organizations utilizing the affected NSM versions should take proactive measures to mitigate this issue.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.1 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu and Matei "Mal" Badanoiu of Pentest-Tools.com
.