CVE-2026-78327
CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.
| CWE | CWE-78 |
| Vendor | sonicwall |
| Product | network security manager (nsm) |
| Published | Sep 4, 2026 |
| Last Updated | Sep 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for sonicwall network security manager (nsm)
Be the first to know when new critical vulnerabilities affecting sonicwall network security manager (nsm) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / Network Security Manager (NSM)
4.3.0 and earlier versions
References
Credits
🔍 Andrei Lungu and Matei "Mal" Badanoiu of Pentest-Tools.com