← Back to CVE search

CVE-2026-3468

SonicWall Email Security

Description

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.

CVSS 4.8EPSS 0.22599999999999998%Risk 0.49
View source
Published
2026-03-31 21:16:32
Affected versions
unknown
Type
Core software
Last modified
2026-07-24 20:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N