What is CVE-2026-3470?

CVE-2026-3470 is a low-severity vulnerability in Sonicwall Email Security, classified under Improper Input Validation. CVSS score: 3.8/10. Published 2026-03-31.

How severe is CVE-2026-3470?

Low severity. CVSS v3 base score is 3.8 out of 10.

Improper input validation in Sonicwall Email Security

CVE-2026-3470

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted inpu…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L.

Affected products

Sonicwall Email Security — versions 10.0.34.8215 and earlier versions, 10.0.34.8223 and earlier versions
Sonicwall Email_security
Sonicwall Esa5000
Sonicwall Esa5050
Sonicwall Esa7000
Sonicwall Esa7050
Sonicwall Esa9000

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

PSIRT@sonicwall.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-3470?: CVE-2026-3470 is a low-severity vulnerability in Sonicwall Email Security, classified under Improper Input Validation. CVSS score: 3.8/10. Published 2026-03-31.
How severe is CVE-2026-3470?: Low severity. CVSS v3 base score is 3.8 out of 10.