A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.
References
| Link | Resource |
|---|---|
| https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
13 Apr 2026, 16:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sonicwall email Security
Sonicwall esa7050 Sonicwall esa5050 Sonicwall esa5000 Sonicwall Sonicwall esa9000 Sonicwall esa7000 |
|
| CPE | cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:* cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:* |
|
| References | () https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002 - Vendor Advisory |
31 Mar 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-31 21:16
Updated : 2026-04-13 16:50
NVD link : CVE-2026-3468
Mitre link : CVE-2026-3468
CVE.ORG link : CVE-2026-3468
JSON object : View
Products Affected
sonicwall
- esa7000
- esa7050
- esa5050
- esa5000
- email_security
- esa9000
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')