CVE-2026-3469 Denial of service in Email Security
A remote authenticated admin can cause the SonicWall Email Security appliance to become unresponsive via improper input validation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3469?
CVE-2026-3469 is a low-severity denial of service vulnerability in SonicWall Email Security, published on 31 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.
Weakness: CWE-20
Which versions are affected by CVE-2026-3469?
It affects 1 product.
Products include Sonicwall Email Security.
How do I fix CVE-2026-3469?
No fix has been published for CVE-2026-3469 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-3469 being exploited?
There is no known exploitation of CVE-2026-3469 in the wild and no public exploit code.
Other vulnerabilities in SonicWall Email Security
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File
- CVE-2021-20023 SonicWall Email Security Path Traversal
- CVE-2023-0655 Information disclosure in SonicWall Email Security
- CVE-2026-3468 Cross-site scripting in Email Security
Sources
Also known as GHSA-p68c-r49j-v9xm.