Improper input validation in Sonicwall Email Security
CVE-2026-3470
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted inpu…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (16.4th percentile) — read the EPSS interpretation.
Affected products
- Sonicwall Email Security — versions 10.0.34.8215 and earlier versions, 10.0.34.8223 and earlier versions
Weakness classification (CWE)
References
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 (vendor-advisory)