Email Security and management
CVE-2026-78327: OS command injection in Network Security Manager (NSM)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Network Security Manager (NSM) (Linux, On-Prem) 4.3 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.