CVE-2026-78327

9.1 Critique

Publiée le 04/09/2026 à 21:17 · Modifiée le 08/09/2026 à 21:12 · En attente d'analyse NVD · Source : PSIRT@sonicwall.com

Description

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.

Traduire en français

Produits concernés

SonicWall Network Security Manager (NSM)

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.1 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories