CVE-2026-96540CWE-863broken-access-control

CVE-2026-96540

High · published October 15, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-10-15T01:17Z
References (1)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018 · [email protected]
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 20:06Z
    An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a…
    cvelistv5
  • 14 OCT 20:06Z
    An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a…
    cvelistv5