CVE-2026-78328
Received Received - Intake

Missing Authorization in SonicWall NSM Leading to Privilege Escalation

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: SonicWALL, Inc.

Description
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-78328
EUVD
EUVD-2026-71680

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sonicwall network_security_manager *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a missing authorization vulnerability in SonicWall Network Security Manager (NSM) On-Prem. A lower-privileged Admin user can escalate their privileges to SuperAdmin without proper authorization checks.

Impact Analysis

An attacker with Admin access could exploit this to gain SuperAdmin privileges, allowing them to take full control of the NSM system, modify configurations, and access sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) and HIPAA (health information security).

Mitigation Strategies

Update SonicWall Network Security Manager to the latest patched version immediately to address the missing authorization vulnerability. Review and restrict Admin user privileges to prevent privilege escalation. Monitor logs for unusual SuperAdmin access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78328. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart