Vulnerability-Lookup

WID-SEC-W-2026-0944

Vulnerability from csaf_certbund - Published: 2026-03-31 22:00 - Updated: 2026-03-31 22:00

Summary

SonicWall Email Security Appliance: Mehrere Schwachstellen

Severity

Niedrig

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: SonicWall Email Security ist eine mehrschichtige Vor-Ort-Lösung, die vor fortschrittlichen E-Mail-Bedrohungen schützt.

Angriff: Ein entfernter, authentisierter Angreifer mit Administratorrechten kann mehrere Schwachstellen in SonicWall Email Security Appliance ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuführen.

Betroffene Betriebssysteme: - Appliance - Sonstiges

CVE-2026-3468

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SonicWall Email Security Appliance 5050 <10.0.35.8405 SonicWall / Email Security		Appliance 5050 <10.0.35.8405
SonicWall Email Security Appliance 7000 <10.0.35.8405 SonicWall / Email Security		Appliance 7000 <10.0.35.8405
SonicWall Email Security Appliance 5000 <10.0.35.8405 SonicWall / Email Security		Appliance 5000 <10.0.35.8405
SonicWall Email Security Appliance Hyper-V <10.0.35.8405 SonicWall / Email Security		Appliance Hyper-V <10.0.35.8405
SonicWall Email Security Appliance 7050 <10.0.35.8405 SonicWall / Email Security		Appliance 7050 <10.0.35.8405
SonicWall Email Security Appliance 9000 <10.0.35.8405 SonicWall / Email Security		Appliance 9000 <10.0.35.8405

CVE-2026-3469

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SonicWall Email Security Appliance 5050 <10.0.35.8405 SonicWall / Email Security		Appliance 5050 <10.0.35.8405
SonicWall Email Security Appliance 7000 <10.0.35.8405 SonicWall / Email Security		Appliance 7000 <10.0.35.8405
SonicWall Email Security Appliance 5000 <10.0.35.8405 SonicWall / Email Security		Appliance 5000 <10.0.35.8405
SonicWall Email Security Appliance Hyper-V <10.0.35.8405 SonicWall / Email Security		Appliance Hyper-V <10.0.35.8405
SonicWall Email Security Appliance 7050 <10.0.35.8405 SonicWall / Email Security		Appliance 7050 <10.0.35.8405
SonicWall Email Security Appliance 9000 <10.0.35.8405 SonicWall / Email Security		Appliance 9000 <10.0.35.8405

CVE-2026-3470

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SonicWall Email Security Appliance 5050 <10.0.35.8405 SonicWall / Email Security		Appliance 5050 <10.0.35.8405
SonicWall Email Security Appliance 7000 <10.0.35.8405 SonicWall / Email Security		Appliance 7000 <10.0.35.8405
SonicWall Email Security Appliance 5000 <10.0.35.8405 SonicWall / Email Security		Appliance 5000 <10.0.35.8405
SonicWall Email Security Appliance Hyper-V <10.0.35.8405 SonicWall / Email Security		Appliance Hyper-V <10.0.35.8405
SonicWall Email Security Appliance 7050 <10.0.35.8405 SonicWall / Email Security		Appliance 7050 <10.0.35.8405
SonicWall Email Security Appliance 9000 <10.0.35.8405 SonicWall / Email Security		Appliance 9000 <10.0.35.8405

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://psirt.global.sonicwall.com/vuln-detail/SN…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "niedrig"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "SonicWall Email Security ist eine mehrschichtige Vor-Ort-L\u00f6sung, die vor fortschrittlichen E-Mail-Bedrohungen sch\u00fctzt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer mit Administratorrechten kann mehrere Schwachstellen in SonicWall Email Security Appliance ausnutzen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0944 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0944.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0944 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0944"
      },
      {
        "category": "external",
        "summary": "SonicWall Security Advisory vom 2026-03-31",
        "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"
      }
    ],
    "source_lang": "en-US",
    "title": "SonicWall Email Security Appliance: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-31T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-01T10:39:13.745+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0944",
      "initial_release_date": "2026-03-31T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-31T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Appliance 5000 \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 5000 \u003c10.0.35.8405",
                  "product_id": "T052339"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5000 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 5000 10.0.35.8405",
                  "product_id": "T052339-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_5000__10.0.35.8405"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Appliance 5050 \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 5050 \u003c10.0.35.8405",
                  "product_id": "T052340"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5050 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 5050 10.0.35.8405",
                  "product_id": "T052340-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_5050__10.0.35.8405"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Appliance 7000 \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 7000 \u003c10.0.35.8405",
                  "product_id": "T052341"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 7000 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 7000 10.0.35.8405",
                  "product_id": "T052341-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_7000__10.0.35.8405"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Appliance 7050 \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 7050 \u003c10.0.35.8405",
                  "product_id": "T052342"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 7050 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 7050 10.0.35.8405",
                  "product_id": "T052342-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_7050__10.0.35.8405"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Appliance 9000 \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 9000 \u003c10.0.35.8405",
                  "product_id": "T052343"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 9000 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance 9000 10.0.35.8405",
                  "product_id": "T052343-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_9000__10.0.35.8405"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Appliance Hyper-V \u003c10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance Hyper-V \u003c10.0.35.8405",
                  "product_id": "T052345"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance Hyper-V 10.0.35.8405",
                "product": {
                  "name": "SonicWall Email Security Appliance Hyper-V 10.0.35.8405",
                  "product_id": "T052345-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sonicwall:email_security:appliance_hyper-v__10.0.35.8405"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Email Security"
          }
        ],
        "category": "vendor",
        "name": "SonicWall"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3468",
      "product_status": {
        "known_affected": [
          "T052340",
          "T052341",
          "T052339",
          "T052345",
          "T052342",
          "T052343"
        ]
      },
      "release_date": "2026-03-31T22:00:00.000+00:00",
      "title": "CVE-2026-3468"
    },
    {
      "cve": "CVE-2026-3469",
      "product_status": {
        "known_affected": [
          "T052340",
          "T052341",
          "T052339",
          "T052345",
          "T052342",
          "T052343"
        ]
      },
      "release_date": "2026-03-31T22:00:00.000+00:00",
      "title": "CVE-2026-3469"
    },
    {
      "cve": "CVE-2026-3470",
      "product_status": {
        "known_affected": [
          "T052340",
          "T052341",
          "T052339",
          "T052345",
          "T052342",
          "T052343"
        ]
      },
      "release_date": "2026-03-31T22:00:00.000+00:00",
      "title": "CVE-2026-3470"
    }
  ]
}

CVE-2026-3468 (GCVE-0-2026-3468)

Vulnerability from cvelistv5 – Published: 2026-03-31 20:17 – Updated: 2026-03-31 20:35

Summary

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

sonicwall

References

1 reference

URL	Tags
https://psirt.global.sonicwall.com/vuln-detail/SN…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
SonicWall	Email Security	Affected: 10.0.34.8215 and earlier versions Affected: 10.0.34.8223 and earlier versions

Date Public

2026-03-31 06:00

Credits

Brian Mariani of DigitalCanion SA - www.digitalcanion.com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.8,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-3468",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-31T20:35:08.592056Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-31T20:35:38.252Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Email Security",
          "vendor": "SonicWall",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.34.8215 and earlier versions"
            },
            {
              "status": "affected",
              "version": "10.0.34.8223 and earlier versions"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Brian Mariani of DigitalCanion SA - www.digitalcanion.com"
        }
      ],
      "datePublic": "2026-03-31T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code."
            }
          ],
          "value": "A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-31T20:17:11.236Z",
        "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
        "shortName": "sonicwall"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"
        }
      ],
      "source": {
        "advisory": "SNWLID-2026-0002",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
    "assignerShortName": "sonicwall",
    "cveId": "CVE-2026-3468",
    "datePublished": "2026-03-31T20:17:11.236Z",
    "dateReserved": "2026-03-03T09:59:57.366Z",
    "dateUpdated": "2026-03-31T20:35:38.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3469 (GCVE-0-2026-3469)

Vulnerability from cvelistv5 – Published: 2026-03-31 20:18 – Updated: 2026-03-31 20:34

Summary

A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.

Severity

2.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper input validation

Assigner

sonicwall

References

1 reference

URL	Tags
https://psirt.global.sonicwall.com/vuln-detail/SN…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
SonicWall	Email Security	Affected: 10.0.34.8215 and earlier versions Affected: 10.0.34.8223 and earlier versions

Date Public

2026-03-31 06:00

Credits

Brian Mariani of DigitalCanion SA - www.digitalcanion.com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 2.7,
              "baseSeverity": "LOW",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-3469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-31T20:34:36.717764Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-31T20:34:53.148Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Email Security",
          "vendor": "SonicWall",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.34.8215 and earlier versions"
            },
            {
              "status": "affected",
              "version": "10.0.34.8223 and earlier versions"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Brian Mariani of DigitalCanion SA - www.digitalcanion.com"
        }
      ],
      "datePublic": "2026-03-31T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive."
            }
          ],
          "value": "A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-31T20:18:32.521Z",
        "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
        "shortName": "sonicwall"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"
        }
      ],
      "source": {
        "advisory": "SNWLID-2026-0002",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
    "assignerShortName": "sonicwall",
    "cveId": "CVE-2026-3469",
    "datePublished": "2026-03-31T20:18:32.521Z",
    "dateReserved": "2026-03-03T09:59:59.495Z",
    "dateUpdated": "2026-03-31T20:34:53.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3470 (GCVE-0-2026-3470)

Vulnerability from cvelistv5 – Published: 2026-03-31 20:19 – Updated: 2026-03-31 20:34

Summary

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.

Severity

3.8 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper input validation

Assigner

sonicwall

References

1 reference

URL	Tags
https://psirt.global.sonicwall.com/vuln-detail/SN…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
SonicWall	Email Security	Affected: 10.0.34.8215 and earlier versions Affected: 10.0.34.8223 and earlier versions

Date Public

2026-03-31 06:00

Credits

Brian Mariani of DigitalCanion SA - www.digitalcanion.com

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 3.8,
              "baseSeverity": "LOW",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-3470",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-31T20:34:11.598748Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-31T20:34:15.574Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Windows"
          ],
          "product": "Email Security",
          "vendor": "SonicWall",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.34.8215 and earlier versions"
            },
            {
              "status": "affected",
              "version": "10.0.34.8223 and earlier versions"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Brian Mariani of DigitalCanion SA - www.digitalcanion.com"
        }
      ],
      "datePublic": "2026-03-31T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database."
            }
          ],
          "value": "A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-31T20:19:38.338Z",
        "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
        "shortName": "sonicwall"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"
        }
      ],
      "source": {
        "advisory": "SNWLID-2026-0002",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
    "assignerShortName": "sonicwall",
    "cveId": "CVE-2026-3470",
    "datePublished": "2026-03-31T20:19:38.338Z",
    "dateReserved": "2026-03-03T10:00:16.245Z",
    "dateUpdated": "2026-03-31T20:34:15.574Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0944

CVE-2026-3468 (GCVE-0-2026-3468)

CVE-2026-3469 (GCVE-0-2026-3469)

CVE-2026-3470 (GCVE-0-2026-3470)

Tags

Sightings

Nomenclature