Code Injection Vulnerability in SonicWall Email Security Appliance
CVE-2026-66150

7.8HIGH

Key Information:

Vendor

Sonicwall
Status
Email Security
Vendor
CVE Published:
11 August 2026

What is CVE-2026-66150?

The SonicWall Email Security appliance is susceptible to a code injection vulnerability due to improper control of code generation. An authenticated attacker with access to the restricted Command Line Interface (CLI) of the appliance can execute arbitrary OS commands as root through SNMP. This may allow malicious actors to manipulate system operations, posing significant security risks to affected environments.

Affected Version(s)

Email Security Linux 10.0.35.8405 and earlier versions

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.