CVE-2025-40605

🗓️ 20 Nov 2025 12:19:17Reported by sonicwallType

Path traversal Email Security appliance allows path manipulation and access beyond restricted areas.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	SonicWall Email Security Relative Path Traversal	26 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-40605	20 Nov 202513:55	–	circl
CNNVD	SonicWALL Email Security security vulnerabilities	20 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-40605	20 Nov 202512:19	–	cvelist
EUVD	EUVD-2025-198276	20 Nov 202515:30	–	euvd
NCSC	Vulnerabilities fixed in SonicWall Email Security appliances	21 Nov 202516:06	–	ncsc
NVD	CVE-2025-40605	20 Nov 202515:17	–	nvd
osv_cve	CVE-2025-40605	20 Nov 202515:17	–	osv_cve
Positive Technologies	PT-2025-47568	19 Nov 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-40605: Relative Path Traversal	20 Nov 202500:00	–	rapid7

NVD

Vulners

Node

AND

sonicwall email_security_appliance_5000_firmwareRange≤10.0.33.8195

sonicwall email_security_appliance_5000Match-

Node

AND

sonicwall email_security_appliance_5050_firmwareRange≤10.0.33.8195

sonicwall email_security_appliance_5050Match-

Node

AND

sonicwall email_security_appliance_7000_firmwareRange≤10.0.33.8195

sonicwall email_security_appliance_7000Match-

Node

AND

sonicwall email_security_appliance_7050_firmwareRange≤10.0.33.8195

sonicwall email_security_appliance_7050Match-

Node

AND

sonicwall email_security_appliance_9000_firmwareRange≤10.0.33.8195

sonicwall email_security_appliance_9000Match-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux",
      "Windows"
    ],
    "product": "Email Security",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.33.8195 and earlier versions"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018

18 Oct 2026 20:10Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.3

EPSS0.00358

SSVC

CWE-23