SONICWALL has released security updates for two high‑severity flaws in NSM On‑Prem deployments. The issues, tracked as CVE-2026-96540 (CWE-863, CVSS 8.8) and CVE-2026-100232 (CWE-78, CVSS 7.2), could allow a remote, authenticated attacker to escalate privileges or execute arbitrary operating system commands. SonicWall notes there is no evidence these vulnerabilities are being exploited in the wild and NSM SaaS versions are not affected.
The affected products are on‑premises NSM deployments running version 4.3.1 or earlier, with SonicWall urging immediate upgrades to version 4.4.0 or higher. Administrators should also restrict the NSM management interface to trusted internal networks.
In detail, CVE-2026-96540 arises from improper access control in the configuration export feature, where insufficient authorization checks may enable a remote authenticated low‑privileged user to access sensitive data and potentially escalate privileges or intercept communications within the NSM instance.
CVE-2026-100232 is a post‑authentication OS command injection vulnerability (CWE-78) caused by inadequate input neutralisation before passing data to the system shell; under certain conditions, a high‑privilege, authenticated attacker could inject arbitrary OS commands and achieve remote code execution. The advisory states there are no workarounds, and upgrading to 4.4.0+ is the recommended mitigation, alongside limiting management interface exposure to trusted networks.