CVE-2026-81939Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-04: 2Mentions · 2026-09-07: 1Patch / Workaround · 2026-09-07: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-07: 109-0409-07
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-042
Disclosure1General1
2026-09-071
Patch1
Full discourse3 posts
  • Autumn Good@autumn_good_35
    General

    CVE-2026-78327とCVE-2026-78328は組み合わせで使えそうですね... CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 SonicWall NSM On-Prem Affected By Multiple Vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015

    Post summary

    The post merely lists several CVE identifiers and hints they may be used together, linking to a generic SonicWall PSIRT advisory without detailing exploitation code, patches, or technical specifics.

    00022526
    7.3K followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: Critical vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem. CVE-2026-78327, CVE-2026-78328, CVE-2026-81939 CVSS:9.1. Authenticated flaws chain to remote code execution. #Patch #Patch #Patch

    Post summary

    A warning about critical CVEs in SonicWall Network Security Manager on‑prem that enable remote code execution, with an implication that patches are required.

    02000345
    7.2K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-81939 A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files … https://www.cve.org/CVERecord?id=CVE-2026-81939

    Post summary

    The text announces a Zip Slip vulnerability in SonicWall Network Security Manager that permits arbitrary file extraction via file upload, without mentioning exploits, patches, or active attacks.

    00000883
    58.1K followersView on X

Explore more