CVE-2026-107154 · Infrastructure
NO FIX YET
A session validation flaw in the SonicOS management interface can, under specific conditions, let a remote attacker without credentials perform unauthorized operations. The sources do not say which operations or which SonicOS versions are affected.
first public Nov 6, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Organizations running SonicWall firewalls with SonicOS whose management interface can be reached over the network. The sources do not list the specific conditions or versions, so exposure cannot be confirmed from them. Systems where the management interface is restricted to a trusted internal network are likely lower risk, but the sources do not confirm this.
Not affected if management-interface-not-exposed
Who cares firewall, self-hosted, sonicos, sonicwall
Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.