{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3asonicwallnetwork_security_manager_on_prem/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sonicwall:network_security_manager_on_prem:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-100232"},{"id":"CVE-2026-96540"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Network Security Manager On-Prem (\u003c 4.4.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","security-policy-bypass"],"_cs_type":"advisory","_cs_vendors":["SonicWall"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified in SonicWall Network Security Manager (NSM) On-Prem, affecting VMWare, Hyper-V, Azure, and KVM deployments. These security flaws, tracked under CVE-2026-100232 and CVE-2026-96540, pose a significant risk to organizational infrastructure by allowing remote attackers to bypass security policy enforcement and execute arbitrary code.\u003c/p\u003e\n\u003cp\u003eThe flaws reside in versions prior to 4.4.0. Given the role of NSM in managing and monitoring firewall appliances, exploitation could allow an attacker to gain broad control over the management plane of an organization's network security perimeter. Defenders should prioritize patching all instances of NSM On-Prem to version 4.4.0 or later as advised by the SonicWall PSIRT bulletin SNWLID-2026-0018.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities enables unauthorized remote code execution and policy bypass, which can lead to complete compromise of the Network Security Manager appliance, unauthorized access to managed network devices, and potential exfiltration of sensitive configuration data or credentials stored within the security management ecosystem.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade all instances of SonicWall Network Security Manager On-Prem to version 4.4.0 or later to address CVE-2026-100232 and CVE-2026-96540.\u003c/li\u003e\n\u003cli\u003eRestrict access to the Network Security Manager management interface to trusted administrative network segments and ensure that the management interface is not exposed to the public internet.\u003c/li\u003e\n\u003cli\u003eReview audit logs on the NSM appliance for unexpected configuration changes or unauthorized service executions following the update.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T16:26:45Z","date_published":"2026-10-15T16:26:45Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sonicwall-nsm-vulnerabilities/","summary":"Multiple vulnerabilities in SonicWall Network Security Manager versions prior to 4.4.0, including CVE-2026-100232 and CVE-2026-96540, allow unauthenticated attackers to achieve remote code execution and bypass security policies.","title":"Multiple Vulnerabilities in SonicWall Network Security Manager","url":"https://feed.craftedsignal.io/briefs/2026-10-sonicwall-nsm-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:sonicwall:network_security_manager_on_prem:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}