Veille CVE

Recherche « SonicWall Network Security Manager (NSM) »

5 CVE

Critique 3 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SonicWall Network Security Manager (NSM) » ✕
  1. CVE-2026-96540 8.8 Élevée

    SonicWall Network Security Manager (NSM)

    An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

  2. CVE-2026-100232 7.2 Élevée

    SonicWall Network Security Manager (NSM)

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.

  3. CVE-2026-81939 9.1 Critique

    SonicWall Network Security Manager (NSM)

    A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.

  4. CVE-2026-78328 9.1 Critique

    SonicWall Network Security Manager (NSM)

    A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.

  5. CVE-2026-78327 9.1 Critique

    SonicWall Network Security Manager (NSM)

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.