Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: SonicWall Email Security — psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018 Clear all filters
TI-2025-27085 CVE-2025-40605 · GHSA-654w-wx9h-5mgg

Path traversal in SonicWall Email Security

Priority LOW 24

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00358 Published 2025-11-20 No fix listed CWE-23
TI-2025-27084 CVE-2025-40604 · GHSA-pcxg-qcmm-jh7x

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security…

Priority MEDIUM 42

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify syste…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00206 Published 2025-11-20 No fix listed CWE-494