SonicWall Network Security Manager Nsm vulnerabilities

5 CVEs affecting SonicWall Network Security Manager Nsm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96540, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-78327, published 2026-09-04. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an…
CVE-2026-100232, published 2026-10-14. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM)…
CVE-2026-81939, published 2026-09-04. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination…
CVE-2026-78328, published 2026-09-04. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.
CVE-2026-96540, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain…