Email Security and management

CVE-2026-3469: Denial-of-service (DoS) in Email Security

A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityLOWCVSS 3.1 2.7
EPSS0.47%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
Email Security (Linux, Windows) 10.0See the advisory

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.