CVE-2021-20021 — SonicWall Email Security Improper Privilege Management Vulnerability

CVE-2021-20021

CRITICAL · CVSS 9.8 ⚠ KEV — EXPLOITED

EPSS exploitation probability: 100%

⚠ Listed in the CISA Known Exploited Vulnerabilities catalog — actively exploited.

Published 2021-11-03 · Last modified 2026-08-12T05:17:33.710

Summary

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.

Affected products

SonicWall — SonicWall Email Security

Does this affect you?

Add your gear to cvedb and we'll alert you only when SonicWall ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.