{"id":"CVE-2026-107154","kind":"vulnerability","aliases":["CVE-2026-107154"],"related":[],"title":"SonicWall SonicOS: session validation flaw lets unauthenticated remote attackers act","description":"A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.","summary":"A session validation flaw in the SonicOS management interface can, under specific conditions, let a remote attacker without credentials perform unauthorized operations. The sources do not say which operations or which SonicOS versions are affected.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firewall","infrastructure","self-hosted","sonicos","sonicwall"],"not_affected_if":["management-interface-not-exposed"],"how_to_check":"- Record each SonicWall firewall's SonicOS version (management console, System > Status)\n- Check whether the management interface (HTTPS) is reachable from the internet or untrusted networks; restrict it to a trusted network\n- Watch the SonicWall PSIRT portal for the advisory covering CVE-2026-107154 to get affected and fixed versions; they are not yet known","fix":null,"status":"open","published_at":"2026-11-06T19:17:06+00:00","first_seen_at":"2026-11-06T19:43:48+00:00","triaged_at":"2026-11-06T19:45:47+00:00","updated_at":"2026-11-06T19:47:59+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-06T19:45:47Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"SonicWall SonicOS: session validation flaw lets unauthenticated remote attackers act","impact":"high","summary":"A session validation flaw in the SonicOS management interface can, under specific conditions, let a remote attacker without credentials perform unauthorized operations. The sources do not say which operations or which SonicOS versions are affected.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["sonicwall","sonicos","firewall","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote attacker performs unauthorized management actions on the firewall","analyst_note":"Find the vendor advisory and the list of affected SonicOS versions and the specific trigger conditions; the NVD entry alone gives no ranges or fix.","how_to_check":"- Identify SonicOS firewall appliances on the network and their firmware versions in the management console\n- Check whether the management interface is reachable from the internet\n- unknown for the exact affected versions","plain_action":"","needs_analyst":true,"not_affected_if":["management-interface-not-exposed"],"who_is_affected":"Organizations running SonicWall firewalls with SonicOS whose management interface can be reached over the network. The sources do not list the specific conditions or versions, so exposure cannot be confirmed from them. Systems where the management interface is restricted to a trusted internal network are likely lower risk, but the sources do not confirm this.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000696,"input_tokens":4176,"output_tokens":556,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the vendor advisory and the list of affected SonicOS versions and the specific trigger conditions; the NVD entry alone gives no ranges or fix.","search":"'-107154':13A,16A '-2026':12A,15A 'act':10A 'affect':58B 'attack':9A,40B,81C 'condit':36B,74C 'could':75C 'credenti':42B 'cve':11A,14A 'enabl':77C 'firewal':17B 'flaw':5A,27B 'host':21B 'identifi':65C 'infrastructur':18B 'interfac':32B,70C 'let':6A,37B 'manag':31B,69C 'oper':45B,52B,85C 'perform':43B,83C 'potenti':76C 'remot':8A,39B,79C 'say':50B 'self':20B 'self-host':19B 'session':3A,25B,60C 'sonico':2A,22B,30B,55B,68C 'sonicwal':1A,23B 'sourc':47B 'specif':35B,73C 'unauthent':7A,80C 'unauthor':44B,84C 'valid':4A,26B,61C 'version':56B 'vulner':62C 'without':41B","nicknames":[],"mitigations":[],"who_affected":"Organizations running SonicWall firewalls with SonicOS whose management interface can be reached over the network. The sources do not list the specific conditions or versions, so exposure cannot be confirmed from them. Systems where the management interface is restricted to a trusted internal network are likely lower risk, but the sources do not confirm this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["firewall","high","infrastructure","selfhosted","sonicos","sonicwall"],"campaign_type":null,"search_a":"'-107154':13A,16A '-2026':12A,15A 'act':10A 'attack':9A 'cve':11A,14A 'flaw':5A 'let':6A 'remot':8A 'session':3A 'sonico':2A 'sonicwal':1A 'unauthent':7A 'valid':4A","search_b":"'affect':58B 'attack':40B 'condit':36B 'credenti':42B 'firewal':17B 'flaw':27B 'host':21B 'infrastructur':18B 'interfac':32B 'let':37B 'manag':31B 'oper':45B,52B 'perform':43B 'remot':39B 'say':50B 'self':20B 'self-host':19B 'session':25B 'sonico':22B,30B,55B 'sonicwal':23B 'sourc':47B 'specif':35B 'unauthor':44B 'valid':26B 'version':56B 'without':41B","search_c":"'attack':81C 'condit':74C 'could':75C 'enabl':77C 'identifi':65C 'interfac':70C 'manag':69C 'oper':85C 'perform':83C 'potenti':76C 'remot':79C 'session':60C 'sonico':68C 'specif':73C 'unauthent':80C 'unauthor':84C 'valid':61C 'vulner':62C","first_public_at":"2026-11-06T19:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107154","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107154","severity":null,"published_at":"2026-11-06T19:17:06+00:00","modified_at":"2026-11-06T19:17:06+00:00","first_seen_at":"2026-11-06T19:43:48+00:00","fetched_at":"2026-11-06T19:43:48+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-107154:1927","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107154","severity":null,"published_at":"2026-11-06T19:47:59+00:00","modified_at":"2026-11-06T19:47:59+00:00","first_seen_at":"2026-11-06T19:47:59+00:00","fetched_at":"2026-11-06T19:47:59+00:00","note":"No SonicWall PSIRT advisory (SNWLID) found for this CVE in search as of publication; PSIRT portal is JS/reCAPTCHA-gated. NVD only: no versions, fix, or conditions. NVD CVSS vector is AV:N/PR:N/UI:R (user interaction required), so 'unauthenticated' may still need a user action. Nothing verified. Recheck PSIRT psirt.global.sonicwall.com for the SNWLID once published.","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-107154"]}],"documents":[{"id":89372,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107154","title":"NVD: CVE-2026-107154","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}