Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Advisory TWCERTCC-200-202610-00000022

[Description]
SonicWall has released a critical security vulnerability advisory for NSM On-Prem (CVE-2026-96540, CVSS: 8.8). This is an access control vulnerability that may allow authenticated attackers to obtain sensitive information. Attackers may exploit this vulnerability to escalate their privileges to administrator or intercept communications of other users of the NSM instance.

[Affected Platforms]
Network Security Manager (NSM) On-Prem versions 4.3.1 and earlier

[Recommendations]
Please update Network Security Manager (NSM) On-Prem to version 4.4.0 or later

[References]
1. https://www.twcert.org.tw/tw/cp-169-11287-124e1-1.html