7.8 HighCWE-94
CVE-2026-66149
SonicWall Email Security vulnerability
SonicWallEmail Security
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.3%probability of exploitation in the next 30 days
Higher than 16% of scored CVEs
SeverityCVSS
7.8High
Description NVD
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask.
Coverage No articles yet
No CyberSIXT article names CVE-2026-66149 yet. New articles appear here and in the RSS feed.