7.8
High
CVE-2026-66149 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
Description
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Email Security | Versions not published |
Other CVEs of Email Security
The 11 CVEs of Email Security →
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
High
CVE-2026-3470
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to…
3.8
Low
CVE-2026-3469
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security…
2.7
Low
CVE-2026-3468
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to…
4.8
Medium