Command Injection Vulnerability in SonicWall Network Security Manager
CVE-2026-78327

9.1CRITICAL

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
4 September 2026

What is CVE-2026-78327?

The SonicWall Network Security Manager is susceptible to an OS command injection vulnerability, which permits an authenticated attacker with SuperAdmin privileges to execute arbitrary commands on the underlying host. This could lead to unauthorized remote code execution, posing significant security risks to the affected systems. Proper mitigation measures and urgent patching are essential to safeguard against potential exploitation.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.0 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu and Matei "Mal" Badanoiu of Pentest-Tools.com
.