{"affected":[{"defaultStatus":"unknown","platforms":["Gen7","Gen8"],"product":"SonicOS","source":"CNA: sonicwall","vendor":"SonicWall","versions":[{"status":"affected","version":"7.3.3-7015 and older versions"},{"status":"affected","version":"8.2.2-8015 and older versions"}]}],"cveId":"CVE-2026-107155","cwes":["CWE-942"],"description":"A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793992257891,"publishedAt":1793991003769,"references":[{"source":"CNA: sonicwall","tags":["vendor-advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014"}],"remediation":[],"revision":"3a8dc99d11e1447f0ce0db111d0d186a2e9711633aa755d8496e86b1165ad1be","sources":[{"modifiedAt":1793992257891,"name":"CNA: sonicwall","retrievedAt":1793995741114,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107155"}],"ssvc":{"assessedAt":1793992251606,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-107155","updatedAt":1793995741114}