What’s Vulnerable › Vulnerabilities

CVE-2025-40605

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-20 · updated 2026-10-18
• Weakness: CWE-23

Description

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Affected products

• SonicWall Email Security Appliance 5000 Firmware: through 10.0.33.8195
• SonicWall Email Security Appliance 5050 Firmware: through 10.0.33.8195
• SonicWall Email Security Appliance 7000 Firmware: through 10.0.33.8195
• SonicWall Email Security Appliance 7050 Firmware: through 10.0.33.8195
• SonicWall Email Security Appliance 9000 Firmware: through 10.0.33.8195

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018

Get alerted when CVE-2025-40605 or the next vulnerability affects your stack