CVE-2026-66150

{"id": "CVE-2026-66150", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-66150", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-11T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "PSIRT@sonicwall.com", "affectedData": [{"vendor": "SonicWall", "product": "Email Security", "versions": [{"status": "affected", "version": "10.0.35.8405 and earlier versions"}], "platforms": ["Linux"], "defaultStatus": "unknown"}]}], "published": "2026-08-11T21:17:49.497", "references": [{"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0012", "source": "PSIRT@sonicwall.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "PSIRT@sonicwall.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP."}, {"lang": "es", "value": "Control inadecuado de la generaci\u00f3n de c\u00f3digo (\u2019Inyecci\u00f3n de c\u00f3digo\u2019) vulnerabilidad en el dispositivo SonicWall Email Security permite a un atacante autenticado con acceso a la CLI restringida de SonicWall Email Security inyectar comandos arbitrarios del sistema operativo que se ejecutan como root a trav\u00e9s de SNMP."}], "lastModified": "2026-10-24T16:10:00.153", "sourceIdentifier": "PSIRT@sonicwall.com"}