Session Validation Flaw in SonicOS Management Interface
CVE-2026-107154

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-107154?

A session validation flaw found in the SonicOS management interface could, under certain conditions, allow a remote unauthenticated attacker to execute unauthorized operations. This vulnerability highlights the importance of robust session management practices to prevent potential exploitation.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.