Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101503102424 | Publication Time | 2026-10-15 15:44:26 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-15 15:44:26 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】SonicWall NSM On-Prem Has a Critical Security Vulnerability (CVE-2026-96540) |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000022 SonicWall has issued an advisory regarding a critical security vulnerability in NSM On-Prem (CVE-2026-96540, CVSS: 8.8). This is an access control vulnerability that may allow an authenticated attacker to obtain sensitive information. An attacker can exploit this vulnerability to escalate privileges to administrator level or intercept communications from other users of an NSM instance. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Network Security Manager (NSM) On-Prem version 4.3.1 and earlier (inclusive) |
|||
| [Recommended Actions] Please update Network Security Manager (NSM) On-Prem to version 4.4.0 or later (inclusive) |
|||
|
[Reference] |
|||