Command Injection Vulnerability in SonicWall Network Security Manager
CVE-2026-78327

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
4 September 2026

What is CVE-2026-78327?

The SonicWall Network Security Manager is susceptible to an OS command injection vulnerability, which permits an authenticated attacker with SuperAdmin privileges to execute arbitrary commands on the underlying host. This could lead to unauthorized remote code execution, posing significant security risks to the affected systems. Proper mitigation measures and urgent patching are essential to safeguard against potential exploitation.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.0 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu and Matei "Mal" Badanoiu of Pentest-Tools.com
.