Permissive Cross-Domain Policy Vulnerability in SonicOS by SonicWall
CVE-2026-107155

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Sonicos
Vendor
CVE Published:
6 November 2026

What is CVE-2026-107155?

A permissive cross-domain policy vulnerability has been discovered in the SonicOS management interface, allowing a remote unauthenticated attacker to execute unauthorized operations under certain conditions. This vulnerability can compromise the integrity and security of the device, highlighting the importance of proper access controls and prompt updates to mitigate potential risks.

Affected Version(s)

SonicOS Gen7 7.3.3-7015 and older versions

SonicOS Gen7 8.2.2-8015 and older versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.