2093 matches found
SonicWall NetExtender Linux Client Multiple Vulnerabilities
1 CVE-2026-66152 - SonicWall NetExtender arbitrary file write via path traversal vulnerabilityA Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. CVSS Score: 8.8 CVSS Vector:...
SonicWall SRA 4600 VPN - SQL Injection
The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability. id: CVE-2019-7481 info: name: SonicWall SRA 4600 VPN - SQL Injection author: darrenmartyn severity: high description: The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authenticatio...
SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...
PT-2026-81517
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description A path traversal issue exists within the OPSWAT tarball component. This flaw allows an attacker to write arbitrary files with root privileges. Path traversal is a...
PT-2026-81518
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description The NEService auto-upgrade process insecurely handles temporary files, which allows an attacker to manipulate file paths. Recommendations At the moment, there is no...
CVE-2026-66149
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask...
CVE-2026-66150
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...
CVE-2026-66150
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...
CVE-2026-66150
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...
EUVD-2026-56947
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...
CVE-2026-66150
SonicWall Email Security appliances are affected by CVE-2026-66150, a code injection vulnerability that allows an authenticated user with access to the restricted CLI to run arbitrary OS commands with root privileges via SNMP. The issue is described in the PSIRT advisory as affecting SNMP-reachab...
CVE-2026-66149
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask...
CVE-2026-66149
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask...
CVE-2026-66149
CVE-2026-66149 affects SonicWall Email Security appliances. An authenticated user with access to the restricted CLI can exploit a code-injection weakness to run arbitrary OS commands as root via netmask, via a local attack vector. The combined CVSS 3.1 metrics indicate high impact to confidential...
EUVD-2026-56946
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask...
SonicWall Email Security Affected By Multiple Vulnerabilities
1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...
SonicWall GMS Security Affected By Multiple Vulnerabilities
SonicWall GMS Virtual Appliance, Windows - 9.5.1 and earlier versions are vulnerable to the following security issues.1 CVE-2026-66145 - An unauthenticated remote code execution vulnerabilityAn unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and...
PT-2026-70908
Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An authenticated attacker with access to the restricted CLI can perform a local privilege escalation by injecting arbitrary OS commands that execute with root privileges. Thi...
PT-2026-70909
Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...