【Vulnerability Alert】SonicWall NSM On-Prem Has a Critical Security Vulnerability (CVE-2026-96540)

publish date : 2026-10-22 update date : 2026-10-22

Source: Ministry of education information & communication security contingency platform


Publication Number	TACERT-ANA-2026101503102424	Publication Time	2026-10-15 15:44:26
Incident Type	ANA-Vulnerability Alert	Discovery Time	2026-10-15 15:44:26
Impact Level	Low
[Subject] 【Vulnerability Alert】SonicWall NSM On-Prem Has a Critical Security Vulnerability (CVE-2026-96540)
[Content] Forwarded from TWCERTCC-200-202610-00000022 SonicWall has issued an advisory regarding a critical security vulnerability in NSM On-Prem (CVE-2026-96540, CVSS: 8.8). This is an access control vulnerability that may allow an authenticated attacker to obtain sensitive information. An attacker can exploit this vulnerability to escalate privileges to administrator level or intercept communications from other users of an NSM instance. Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform] Network Security Manager (NSM) On-Prem version 4.3.1 and earlier (inclusive)
[Recommended Actions] Please update Network Security Manager (NSM) On-Prem to version 4.4.0 or later (inclusive)
[Reference] 1. https://www.twcert.org.tw/tw/cp-169-11287-124e1-1.html

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw

Organizer: Computer Center

Click Num:

Share