Improper Input Sanitization in SonicWall Email Security Causes Data Corruption

Publication date: 2026-03-31

Last updated on: 2026-04-13

Assigner: SonicWALL, Inc.

Description

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-31

Last Modified

2026-04-13

Generated

2026-07-06

AI Q&A

2026-04-01

EPSS Evaluated

2026-07-05

NVD

CVE-2026-3470

Affected Vendors & Products

Vendor	Product	Version / Range
sonicwall	email_security	to 10.0.35.8405 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization. A remote authenticated attacker with admin privileges can exploit this issue by providing specially crafted input that corrupts the application database.

Impact Analysis

The vulnerability can lead to data corruption within the application database. Since it requires admin-level authentication, an attacker who gains such access could disrupt the integrity and availability of the email security appliance's data.

Hi! I’m here to help you understand CVE-2026-3470. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70