Is CVE-2026-81939 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-81939?

CVE-2026-81939 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-81939

Description

A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive.