CVE-2024-22398: SonicWall Email Security

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system.

Affected products

• SonicWall Email Security: up to and including 10.0.26.7807

Published 2024-03-14. Last modified 2026-06-17.