An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially… (CVE-2026-96540)

CVE-2026-96540 describes an improper access control vulnerability in the export settings of SonicWall Network Security Manager (NSM) on-premises. A remote attacker with authentication may exploit this vulnerability to obtain sensitive data, which could enable privilege escalation to administrator rights or allow interception of communications from other NSM users. No CVSS score or detailed technical exploit information is provided. No patch or remediation details are available, and no known exploits are reported in the wild.

The vulnerability allows a remote authenticated attacker to access sensitive information improperly protected by access controls. This can lead to privilege escalation to administrator level or interception of communications between other users and the NSM instance, potentially compromising confidentiality and control of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the NSM export settings to trusted authenticated users only and monitor for unusual access patterns. Follow vendor instructions once published.