A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin… (CVE-2026-78328)

This vulnerability (CVE-2026-78328) involves a missing authorization check in the SonicWall NSM On-Prem Management interface. A user with lower administrative privileges can exploit this flaw to gain SuperAdmin privileges, effectively escalating their access rights. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and a scope change with high impact on confidentiality, integrity, and availability. No patch or remediation details are currently available from the source data.

Successful exploitation allows a lower-privileged Admin user to escalate to SuperAdmin privileges, potentially leading to full control over the SonicWall NSM On-Prem Management interface. This can compromise the confidentiality, integrity, and availability of the system managed by NSM.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict lower-privileged Admin access and monitor for suspicious privilege escalation attempts.