CVE-2026-100232: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in SonicWall Network Security Manager (NSM)

This vulnerability involves improper neutralization of special elements used in OS commands (CWE-78) within SonicWall Network Security Manager (NSM) on-premises. An authenticated attacker could exploit this flaw to execute arbitrary OS commands remotely, resulting in remote code execution. No CVSS score or detailed technical exploit information is provided. No affected versions or patch information is available in the provided data.

Successful exploitation could allow a remote authenticated attacker to execute arbitrary OS commands on the affected system, potentially leading to full system compromise or unauthorized control of the NSM device. The vulnerability requires authentication, limiting exposure to attackers who have valid credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor SonicWall advisories for updates. Until a patch is available, restrict access to the NSM interface to trusted users and networks, and enforce strong authentication controls.