Denial-of-Service Vulnerability in SonicWall Email Security Appliance
CVE-2026-3469

2.7LOW

Key Information:

Vendor

Sonicwall
Status
Email Security
Vendor
CVE Published:
31 March 2026

What is CVE-2026-3469?

A denial-of-service vulnerability has been identified in the SonicWall Email Security appliance due to inadequate input validation. This flaw enables a remote authenticated attacker, specifically one with admin privileges, to exploit the application. By manipulating inputs, the attacker can render the application unresponsive, impacting the service's availability. Organizations utilizing this appliance should take immediate steps to assess their security posture and apply any relevant mitigations provided by vendor advisories to reduce the risk associated with this vulnerability.

Affected Version(s)

Email Security Linux 10.0.34.8215 and earlier versions

Email Security Linux 10.0.34.8223 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Mariani of DigitalCanion SA - www.digitalcanion.com
.