9.1
Critical
CVE-2026-78327 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the…
Description
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Network Security Manager (NSM) | Versions not published |
Other CVEs of Network Security Manager (NSM)
The 5 CVEs of Network Security Manager (NSM) →
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
7.2
High
CVE-2026-96540
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem…
8.8
High
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing…
9.1
Critical
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface…
9.1
Critical