CVE-2025-40605: SonicWall Email Security Appliance 5000 Firmware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Affected products

• SonicWall Email Security Appliance 5000 Firmware: up to and including 10.0.33.8195
• SonicWall Email Security Appliance 5050 Firmware: up to and including 10.0.33.8195
• SonicWall Email Security Appliance 7000 Firmware: up to and including 10.0.33.8195
• SonicWall Email Security Appliance 7050 Firmware: up to and including 10.0.33.8195
• SonicWall Email Security Appliance 9000 Firmware: up to and including 10.0.33.8195

Published 2025-11-20. Last modified 2026-06-17.