CVE-2026-107155

Name of the Vulnerable Software and Affected Versions SonicOS (affected versions not specified)

Description A permissive Cross-Origin Resource Sharing (CORS) policy exists in the SonicOS management interface and Management API. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain. This flaw could enable a remote unauthenticated attacker to perform unauthorized operations and expose sensitive data through cross-domain requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.