CVE Catalog
CVE-2026-3468
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.23%
13th percentile - higher than 13% of all known CVEs
Summary
A stored XSS vulnerability exists in SonicWall Email Security due to improper input neutralization. A remote authenticated admin user can execute arbitrary JavaScript code.
Risk Assessment
An attacker can inject a malicious script that executes in other administrators' browsers, potentially leading to data theft or session hijacking.
Recommendation
Apply the vendor-supplied patch for SonicWall Email Security.
Original NVD description (English source)
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.