Vulnerability Details CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 7.8