XSS in Sonicwall Email Security
CVE-2026-3468
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as a…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.000 (3.8th percentile) — read the EPSS interpretation.
Affected products
- Sonicwall Email Security — versions 10.0.34.8215 and earlier versions, 10.0.34.8223 and earlier versions
Weakness classification (CWE)
References
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 (vendor-advisory)