CVE-2026-96540: SonicWall Network Security Manager Nsm

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

Affected products

• SonicWall Network Security Manager Nsm: up to and including 4.3.1

Published 2026-10-14. Last modified 2026-10-15.