CVE-2026-3470 Other in Email Security
An authenticated admin can corrupt the application database via improper input sanitization in SonicWall Email Security.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3470?
CVE-2026-3470 is a low-severity vulnerability in SonicWall Email Security, published on 31 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.
Weakness: CWE-20
Which versions are affected by CVE-2026-3470?
It affects 1 product.
Products include Sonicwall Email Security.
How do I fix CVE-2026-3470?
No fix has been published for CVE-2026-3470 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-3470 being exploited?
There is no known exploitation of CVE-2026-3470 in the wild and no public exploit code.
Other vulnerabilities in SonicWall Email Security
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File
- CVE-2021-20023 SonicWall Email Security Path Traversal
- CVE-2023-0655 Information disclosure in SonicWall Email Security
- CVE-2026-3468 Cross-site scripting in Email Security
Sources
Also known as GHSA-mxmj-f4h6-phv6.