CVE-2026-78328Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-04: 2Mentions · 2026-09-07: 1Patch / Workaround · 2026-09-07: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-07: 109-0409-07
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-042
Disclosure2
2026-09-071
Patch1
Full discourse3 posts
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2026-78327とCVE-2026-78328は組み合わせで使えそうですね... CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 SonicWall NSM On-Prem Affected By Multiple Vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015

    Post summary

    The post lists CVE-2026-78327, CVE-2026-78328, and CVE-2026-81939 as affecting SonicWall NSM On‑Prem and provides a link to an advisory, but does not include PoC, exploit code, active exploitation, or mitigation information.

    00022526
    7.3K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Critical vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem. CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 CVSS:9.1. Authenticated flaws chain to remote code execution. #Patch #Patch #Patch

    Post summary

    Three critical SonicWall NSM On‑Prem vulnerabilities (CVE‑2026‑78327, CVE‑2026‑78328, CVE‑2026‑81939) with a CVSS score of 9.1 enable authenticated users to achieve remote code execution; immediate patching is recommended.

    02000345
    7.2K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-78328 A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate pr… https://www.cve.org/CVERecord?id=CVE-2026-78328

    Post summary

    The passage announces a missing‑authorization flaw in SonicWall’s NSM On‑Prem Management interface that could let lower‑privileged admins gain elevated privileges, but offers no PoC, exploit, or mitigation details.

    000001.7K
    58.1K followersView on X

Explore more