CVE-2026-4116
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
Risk Assessment
The organization may be exposed to unauthorized access to resources, potentially leading to data breaches or other security incidents.
Recommendation
It is recommended to update SonicWall SMA1000 appliances to the latest software version to patch this vulnerability.
Other vulnerabilities in SonicWall SMA1000 series appliances
See all- CVE-2026-4113High
The SonicWall SMA1000 series appliances have an observable response discrepancy vulnerability that allows a remote attacker to enumerate SSL VPN user credentials.
- CVE-2026-4112High
The SonicWall SMA1000 series appliances are vulnerable to SQL injection, allowing a remote attacker with read-only administrator privileges to escalate to full administrator rights.
Original NVD description (English source)
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS