Vulnerability · Published Mar 31, 2026 · Assigned by sonicwall
CVE-2026-3469
Low 2.7
In plain English
A low-severity improper input validation in Email Security from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.4%top 66.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Email Security | 10.0.34.8215 and earlier versions10.0.34.8223 and earlier versions |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 vendor-advisory