CVE-2026-78328 PUBLISHED

Assigner: sonicwall
Reserved: 24.08.2026 Published: 04.09.2026 Updated: 04.09.2026

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.

Product Status

Vendor SonicWall
Product Network Security Manager (NSM)
Versions Default: unknown
  • Version 4.3.0 and earlier versions is affected

Credits

  • Andrei Lungu of Pentest-Tools.com finder

References

Problem Types

  • CWE-862 Missing Authorization CWE