Improper Access Control Vulnerability in SonicWall Network Security Manager

CVE-2026-96540

What is CVE-2026-96540?

An improper access control vulnerability has been detected in the SonicWall Network Security Manager (NSM) on-premise version, particularly within export settings. This weakness could enable remote authenticated attackers to gain unauthorized access to sensitive information. The implications of this vulnerability include the potential for attackers to escalate their privileges to that of an administrator, as well as the risk of intercepting communications from other users of the NSM instance, compromising the overall security posture of the network.

References