Vulnerability · Published Nov 6, 2026 · Assigned by sonicwall

CVE-2026-107155

High 8.8

In plain English

A high-severity security flaw in SonicOS from SonicWall. There are no confirmed reports of exploitation so far.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)–no EPSS score yet

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	SonicOS	7.3.3-7015 and older versions8.2.2-8015 and older versions

Weakness: CWE-942 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014 vendor-advisory