{"affected":[{"defaultStatus":"unknown","platforms":["Gen7","Gen8"],"product":"SonicOS","source":"CNA: sonicwall","vendor":"SonicWall","versions":[{"status":"affected","version":"7.3.3-7015 and older versions"},{"status":"affected","version":"8.2.2-8015 and older versions"}]}],"cveId":"CVE-2026-107154","cwes":["CWE-291"],"description":"A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793992302648,"publishedAt":1793991124520,"references":[{"source":"CNA: sonicwall","tags":["vendor-advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014"}],"remediation":[],"revision":"cd940d75f65a42244c9dd00b319c53cef5776624d723e2932c26a2215ffd425c","sources":[{"modifiedAt":1793992302648,"name":"CNA: sonicwall","retrievedAt":1793995740012,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107154"}],"ssvc":{"assessedAt":1793992296659,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-107154","updatedAt":1793995740012}