Skip to content

Known vulnerabilities in SonicWall Email Security

Is your version affected?

CVE Summary Score Published
CVE-2026-66150 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows… 7.8 High Aug 11, 2026
CVE-2026-66149 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows… 7.8 High Aug 11, 2026
CVE-2026-3470 A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to… 3.8 Low Mar 31, 2026
CVE-2026-3469 A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security… 2.7 Low Mar 31, 2026
CVE-2026-3468 A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to… 4.8 Medium Mar 31, 2026
CVE-2025-40605 A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file… 5.3 Medium Nov 20, 2025
CVE-2025-40604 Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem… 6.5 Medium Nov 20, 2025
CVE-2024-22398 An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email… 4.9 Medium Mar 14, 2024
CVE-2021-20023 Exploited SonicWall Email Security Path Traversal Vulnerability 4.9 Medium Apr 20, 2021
CVE-2021-20022 Exploited SonicWall Email Security Unrestricted Upload of File Vulnerability 7.2 High Apr 9, 2021
CVE-2021-20021 Exploited SonicWall Email Security Improper Privilege Management Vulnerability 9.8 Critical Apr 9, 2021

Other SonicWall products