CVE Watchtower


← Back to CVE List

CVE-2025-40604NVD

Vulnerability Summary

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
Severity Level
UNKNOWN
Published Date
Nov 20, 2025
Last Modified
Nov 20, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.