What is CVE-2026-66150?

CVE-2026-66150 is a high-severity vulnerability in Sonicwall Email Security, classified under Code Injection. CVSS score: 7.8/10. Published 2026-08-11.

How severe is CVE-2026-66150?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Sonicwall Email Security

CVE-2026-66150

Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands…

Vulnerability class: RCE (Remote Code Execution)

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sonicwall Email Security — versions 10.0.35.8405 and earlier versions

Weakness classification (CWE)

CWE-94 — Code Injection

References

PSIRT@sonicwall.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-66150?: CVE-2026-66150 is a high-severity vulnerability in Sonicwall Email Security, classified under Code Injection. CVSS score: 7.8/10. Published 2026-08-11.
How severe is CVE-2026-66150?: High severity. CVSS v3 base score is 7.8 out of 10.