Is CVE-2026-78328 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-78328 being exploited in the wild.

How severe is CVE-2026-78328?

Critical severity, with a CVSS score of 9.1, published 4 September 2026.

Is there a fix for CVE-2026-78328?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-78328 attacked?

It is attacked over the network.

Am I affected by CVE-2026-78328?

Check whether you run SonicWall Network Security Manager (NSM) On-Prem at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-78328: SonicWall Network Security Manager privilege escalation in management interface

CVE-2026-78328 · Severity: critical · CVSS 9.1 · Published 2026-09-04

SonicWall Network Security Manager (NSM) On-Prem is a centralized management platform used to administer firewall and network security policies across an organization. A missing authorization check allows a lower-privileged Admin user to escalate their account to SuperAdmin level, potentially gaining full control over all managed security devices and configurations.

Vendors: SonicWall.

Quick answers

Is CVE-2026-78328 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-78328 being exploited in the wild.
How severe is CVE-2026-78328?: Critical severity, with a CVSS score of 9.1, published 4 September 2026.
Which products and versions are affected?: SonicWall Network Security Manager (NSM) On-Prem <UNKNOWN>.
Is there a fix for CVE-2026-78328?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-78328 attacked?: It is attacked over the network.
Am I affected by CVE-2026-78328?: Check whether you run SonicWall Network Security Manager (NSM) On-Prem at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a missing authorization (authorization bypass) flaw in the NSM On-Prem management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin through an unauthenticated or insufficiently authorized API or management operation. The vulnerability is network-reachable and requires an existing Admin account; no additional user interaction is needed. A successful exploitation grants an attacker full administrative control over the NSM platform and all connected security infrastructure. Patches are expected from SonicWall; check PSIRT advisory SNWLID-2026-0015 for available updates.

Affected products

SonicWall Network Security Manager (NSM) On-Prem <UNKNOWN>

Timeline

2026-09-04: disclosed

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.