CVE-2026-100232
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.
| CWE | CWE-78 |
| Vendor | sonicwall |
| Product | network security manager (nsm) |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for sonicwall network security manager (nsm)
Be the first to know when new unknown vulnerabilities affecting sonicwall network security manager (nsm) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / Network Security Manager (NSM)
4.3.1 and earlier versions
References
Credits
Andrei Lungu and Matei "Mal" Badanoiu of Pentest-Tools.com