← Back

CVE-2026-3470

nvd nist
Published: Mar 31, 2026Modified: Jul 24, 2026

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Exploitability: 1.2 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.

Affected (1)

Sonicwall
1 product
Email Security
Configuration A
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Email Security
Before 10.0.35.8405
Running on/withPlatform Versions
Sonicwall
Esa5000
All versions
Sonicwall
Esa5050
All versions
Sonicwall
Esa7000
All versions
Sonicwall
Esa7050
All versions
Sonicwall
Esa9000
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

Source: PSIRT@sonicwall.com
Vendor Advisory

Timeline

No history available yet.