CVE-2025-40605

published 2025-11-20

CVE-2025-40605: A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted…

Priority P4 34 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sonicwall	email_security	—	—
sonicwall	email_security_appliance_5000_firmware	<= 10.0.33.8195	—
sonicwall	email_security_appliance_5050_firmware	<= 10.0.33.8195	—
sonicwall	email_security_appliance_7000_firmware	<= 10.0.33.8195	—
sonicwall	email_security_appliance_7050_firmware	<= 10.0.33.8195	—
sonicwall	email_security_appliance_9000_firmware	<= 10.0.33.8195	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-23