9.8
Critical
CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-306
Description
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Email Security | Versions not published |
Other CVEs of Email Security
The 11 CVEs of Email Security →
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
High
CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
High
CVE-2026-3470
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to…
3.8
Low
CVE-2026-3469
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security…
2.7
Low