Zip Slip Vulnerability in SonicWall Network Security Manager
CVE-2026-81939

9.1CRITICAL

Key Information:

Vendor

Sonicwall
Status
Network Security Manager (nsm)
Vendor
CVE Published:
4 September 2026

What is CVE-2026-81939?

A Zip Slip vulnerability exists within the SonicWall Network Security Manager (NSM) On-Prem, impacting its file upload and archive processing capabilities. This flaw permits attackers to exploit the system by crafting malicious archives that lead to the extraction of files outside the designated directory. Consequently, unauthorized access to sensitive files may occur, jeopardizing the integrity and confidentiality of the affected systems.

Affected Version(s)

Network Security Manager (NSM) Linux 4.3.0 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrei Lungu of Pentest-Tools.com
.