Sonicwall Network Security Manager (Nsm) vulnerabilities

5 vulnerabilities

Known vulnerabilities in Sonicwall Network Security Manager (Nsm), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-96540sonicwallnetwork security manager (nsm)
EPSS score
0.31%
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.7.2CVE-2026-100232sonicwallnetwork security manager (nsm)
EPSS score
1.15%
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.9.1CVE-2026-81939sonicwallnetwork security manager (nsm)
EPSS score
0.68%
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.9.1CVE-2026-78327sonicwallnetwork security manager (nsm)
EPSS score
1.55%
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.9.1CVE-2026-78328sonicwallnetwork security manager (nsm)
EPSS score
0.46%
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.