← Database

CVE-2026-3468

MEDIUM CVSS: 4.8 Published: 2026-03-31 Modified: 2026-07-24

Description

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.

Affected Platforms

Sonicwall Esa5050Sonicwall Esa9000Sonicwall Esa7050Sonicwall Esa7000Sonicwall Esa5000Sonicwall Email Security

Weakness Type

CWE-79

References