Privilege Escalation Vulnerability in SonicWall Network Security Manager
CVE-2026-78328

9.1CRITICAL

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
4 September 2026

What is CVE-2026-78328?

A missing authorization vulnerability exists in SonicWall's Network Security Manager (NSM) On-Prem Management interface, which enables a lower-privileged Admin user to escalate their privileges to that of a SuperAdmin. This flaw potentially allows unauthorized access to sensitive configurations and controls, increasing the risk of malicious activities within the network.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.0 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu of Pentest-Tools.com
.