CVE-2021-20022Used in ransomware
SonicWall SonicWall Email Security
SonicWall Email Security Unrestricted Upload of File Vulnerability
What it is
SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20023 to achieve privilege escalation.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other SonicWall entries on the list
- SonicOS SSLVPN SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability CVE-2026-19868 · Nov 6, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-83548 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 · Jul 14, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-15409 · Jul 14, 2026
- SMA1000 appliance SonicWall SMA1000 Missing Authorization Vulnerability CVE-2025-40602 · Dec 17, 2025