High severity7.8NVD Advisory· Published Aug 11, 2026· Updated Aug 28, 2026
CVE-2026-66150
CVE-2026-66150
Description
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
2- SonicWall Patches Critical Vulnerabilities in Discontinued GMS PlatformSecurityWeek · Aug 12, 2026
- ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation VulnerabilityZero Day Initiative · Aug 11, 2026