{"id":"CVE-2026-107154","published":"2026-11-06T19:17:06.440","lastModified":"2026-11-06T21:13:01.193","description":"A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-291"],"vendors":[],"products":[],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A session validation flaw in SonicOS allows unauthenticated attackers to bypass expected authentication checks under specific conditions, enabling unauthorized operations via the management interface. This violates core access control assumptions and could lead to full system compromise.","exploitability":"Exploitation requires specific internal state conditions in the management session handling logic; no public exploit exists, but the low attack complexity (AC:L) and network vector (AV:N) suggest it may be feasible for skilled remote attackers.","blast_radius":"Successful exploitation could grant an unauthenticated attacker full administrative control over the SonicOS device, enabling data exfiltration, service disruption, or lateral movement within the network.","remediation":"No fixed version is published in the description; disable the SonicOS web management interface until patched, restrict access to the management endpoint via ACLs or firewall rules to trusted IPs only, and monitor for anomalous management traffic per vendor advisory.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","session-fixation","web","network","ics"],"model":"garnet-coder","analyzedAt":"2026-11-08T09:51:24.900Z"}}