20 matches found
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
CVE-2026-78327
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...
CVE-2026-81939
CVE-2026-81939 is a Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality. An attacker with high privileges (e.g., SuperAdmin) can extract files outside the intended destination directory using a specially crafted archive, ...
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...
EUVD-2026-71681
A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...
CVE-2026-78328
CVE-2026-78328 is a missing authorization (CWE-862) vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin . SonicWall rates it CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The NVD/CNA entr...
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
EUVD-2026-71680
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
CVE-2026-78327
An OS Command Injection (CWE-78) in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands executed on the underlying host, resulting in remote code execution . The vulnerability affects NS...
EUVD-2026-71679
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...
CVE-2026-78327
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
1 CVE-2026-78327 - Authenticated Command Injection Vulnerability An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin...
EUVD-2021-7489
Malicious code in bioql PyPI...
SonicWall NSM On-Prem命令执行漏洞（CVE-2021-20026）
...
SonicWall NSM On-Prem OS Command Injection Vulnerability
SonicWall NSM On-Prem is an application from Sonicwall USA, Inc. It provides unlimited scalability to support thousands of SonicWall security appliances under its management. SonicWall NSM On-Prem suffers from an operating system command injection vulnerability that can be exploited by an attacke...
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
CVE-2021-20026
CVE-2021-20026 affects SonicWall NSM On-Prem; an authenticated attacker can perform OS command injection via a crafted HTTP request, impacting NSM On-Prem versions up to 2.2.0-R10 and earlier. Connected sources corroborate the vulnerability in SonicWall NSM On-Prem and indicate a fix was released...
SonicWall NSM On-Prem authenticated command injection vulnerability
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions. CVE: CVE-2021-20026 Last updated: May 27, 2021, 2:07 p.m...
SonicWall NSM On-Prem 操作系统命令注入漏洞
SonicWall NSM On-Prem is an application from Sonicwall USA, Inc. It provides unlimited scalability to support thousands of SonicWall security appliances under its management. SonicWall NSM On-Prem suffers from an operating system command injection vulnerability that can be exploited by an attacke...