CVE-2026-78327: CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection') in SonicWall Network Security Manager (NSM)

This vulnerability involves improper neutralization of special elements used in OS commands within the SonicWall NSM On-Prem Management interface. An attacker with SuperAdmin privileges can exploit this flaw to inject arbitrary OS commands that execute on the host system, resulting in remote code execution. The CVSS 3.1 base score is 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. No remediation or patch information is currently available, and no known exploits have been observed.

Successful exploitation allows an authenticated SuperAdmin user to execute arbitrary OS commands on the underlying host system. This can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict SuperAdmin access to trusted personnel only and monitor for suspicious activity related to command execution on the NSM host.