Privilege Escalation Vulnerability in SonicWall Network Security Manager
CVE-2026-78328

Currently unrated

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
4 September 2026

What is CVE-2026-78328?

A missing authorization vulnerability exists in SonicWall's Network Security Manager (NSM) On-Prem Management interface, which enables a lower-privileged Admin user to escalate their privileges to that of a SuperAdmin. This flaw potentially allows unauthorized access to sensitive configurations and controls, increasing the risk of malicious activities within the network.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.0 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu of Pentest-Tools.com
.