Description
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | Email Security | 10.0.33.8195 and earlier versions | — |
Advisories 2
- NCSC-2025-0376 Kwetsbaarheden verholpen in SonicWall Email Security appliances NCSC-NL (Netherlands) · Nov 21, 2025
- WID-SEC-2025-2647 SonicWall Email Security: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 20, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018 vendor-advisory