CVE-2026-81939
CriticalCVSS 9.1Summary
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.
Risk Assessment
An attacker can overwrite arbitrary files on the system, potentially leading to arbitrary code execution, privilege escalation, or system integrity compromise.
Recommendation
Update SonicWall NSM On-Prem to the latest patched version and restrict archive uploads to trusted users only.
Other vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem
See all- CVE-2026-78328Critical
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin.
- CVE-2026-78327Critical
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution.
Original NVD description (English source)
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.