【Vulnerability Alert】SonicWall NSM On-Prem has a critical security vulnerability (CVE-2026-96540)

• Subject:SonicWall NSM On-Prem has a critical security vulnerability (CVE-2026-96540)

• Description:
  • Forwarded from the TWCERT/CC Security Alert TWCERTCC-200-202610-00000022
  • SonicWall has published a critical security vulnerability (CVE-2026-96540, CVSS: 8.8) for NSM On-Prem. This is an access control vulnerability that may allow an authenticated attacker to obtain sensitive information. An attacker can exploit this vulnerability to escalate privileges to administrator, or to intercept communications of other users on the NSM instance.
• Affected Platforms:
  • Network Security Manager (NSM) On-Prem versions 4.3.1 (inclusive) and earlier
• Recommended Actions:
  • Please update Network Security Manager (NSM) On-Prem to version 4.4.0 (inclusive) or later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11287-124e1-1.html

Computer and Communication Center
Network System Division