轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202610-00000022

[內容說明]
SonicWall針對NSM On-Prem發布重大資安漏洞(CVE-2026-96540，CVSS：8.8)。此為存取控制漏洞，可能允許經身分驗證的攻擊者取取得敏感資訊。攻擊者可利用此漏洞將權限提升至管理員，或攔截NSM instance其他使用者通訊。

[影響平台]
Network Security Manager (NSM) On-Prem 4.3.1 (含)以前版本

[建議措施]
請將Network Security Manager (NSM) On-Prem 更新至 4.4.0 (含)之後版本

[參考資料]
1. https://www.twcert.org.tw/tw/cp-169-11287-124e1-1.html

Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Advisory TWCERTCC-200-202610-00000022

[Description]
SonicWall has released a critical security vulnerability advisory for NSM On-Prem (CVE-2026-96540, CVSS: 8.8). This is an access control vulnerability that may allow authenticated attackers to obtain sensitive information. Attackers may exploit this vulnerability to escalate their privileges to administrator or intercept communications of other users of the NSM instance.

[Affected Platforms]
Network Security Manager (NSM) On-Prem versions 4.3.1 and earlier

[Recommendations]
Please update Network Security Manager (NSM) On-Prem to version 4.4.0 or later

[References]
1. https://www.twcert.org.tw/tw/cp-169-11287-124e1-1.html