Vulnerability · Published Mar 31, 2026 · Assigned by sonicwall
CVE-2026-3470
Low 3.8
In plain English
A low-severity improper input validation in Email Security from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)3.8Low
Exploit odds (30 days)0.3%top 74.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | Email Security | 10.0.34.8215 and earlier versions10.0.34.8223 and earlier versions |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 vendor-advisory