Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-81939

Quick assessment

Affected
SonicWall Network Security Manager (NSM)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SonicWall 网络安全管理器（NSM）的本地部署版本中，文件上传和归档处理功能存在 Zip Slip 漏洞。攻击者可以通过一个精心构造的压缩归档文件，将文件解压到目标目录之外。

AI Predicted 6.5 Difficulty: Moderate

Affected Version Matrix 1

VendorProduct Version RangeStatus
SonicWall Network Security Manager (NSM) 4.3.0 and earlier versions affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-81939

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
SonicWall Network Security Manager (NSM) 4.3.0 and earlier versions -

II. Public POCs for CVE-2026-81939

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-81939

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-81939 (1)

Same Patch Batch · SonicWall · 2026-09-04 · 3 CVEs total

CVE-2026-78328 SonicWall NSM On-Prem 低权限用户可提权至超级管理员
CVE-2026-78327 SonicWall NSM命令注入致远程代码执行漏洞

IV. Related Vulnerabilities

Same product: Network Security Manager (NSM)
Same vendor: SonicWall
Same weakness: CWE-22

V. Comments for CVE-2026-81939

No comments yet

Leave a comment