Critical · 9.1 CVE-2026-78328 EUVD-2026-71680GHSA-h2gj-x3qg-39wj

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privilege…

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by sonicwall

Vendor: SonicWall Product: Network Security Manager (NSM) Category: Network devices

Description

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	Network Security Manager (NSM)	4.3.0 and earlier versions	—

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015 vendor-advisory