CVE-2026-78327Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-09-07)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-04: 1Mentions · 2026-09-07: 2Technical Details · 2026-09-07: 209-0409-07
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-041
General1
2026-09-072
Disclosure2
Full discourse3 posts
  • Autumn Good@autumn_good_35
    General

    CVE-2026-78327とCVE-2026-78328は組み合わせで使えそうですね... CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 SonicWall NSM On-Prem Affected By Multiple Vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015

    Post summary

    The post lists CVE IDs and an advisory link for a SonicWall vulnerability but lacks PoC, exploit, patch, or active‑attack details.

    00022526
    7.3K followersView on X
  • CCB Alert@CCBalert
    Disclosure

    Warning: Critical vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem. CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 CVSS:9.1. Authenticated flaws chain to remote code execution. #Patch #Patch #Patch

    Post summary

    Cybersecurity alert warning of critical authenticated flaws in SonicWall Network Security Manager that allow remote code execution, with a CVSS score of 9.1, but it does not provide PoC, exploit, or patch details.

    02000345
    7.2K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-78327: OS Command Injection in SonicWall NSM On-Prem lets SuperAdmin execute arbitrary commands as RCE on the host. CVSS 9.1. Unpatched—assume exposure. Restrict SuperAdmin access now and monitor for updates. https://www.valtersit.com/cve/CVE-2026-78327/ #CVE #SonicWall #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany #docker #kali

    Post summary

    A high‑severity OS command injection vulnerability (CVE‑2026‑78327) was disclosed for SonicWall NSM On‑Prem, with no patch mentioned; users are advised to restrict SuperAdmin access and monitor for updates.

    0000040
    1.0K followersView on X

Explore more