SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

🗓️ 08 Apr 2026 11:47:22Reported by SonicWallType

sonicwall

sonicwall🔗 psirt.global.sonicwall.com👁 20 Views

SMA1000 affected four CVEs SQL injection privilege escalation, credential enumeration, and two TOTP bypasses.

Reporter	Title	Published	Views	Family All 46
ATTACKERKB	CVE-2026-4114	9 Apr 202614:25	–	attackerkb
ATTACKERKB	CVE-2026-4116	9 Apr 202614:27	–	attackerkb
ATTACKERKB	CVE-2026-4113	9 Apr 202614:23	–	attackerkb
ATTACKERKB	CVE-2026-4112	9 Apr 202614:22	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 1000 allows a intruder to elevate their privileges to the level of an administrator.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of SONICWALL series SMA 1000 allows a intruder to gain unauthorized access to protected information.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSLVPN component of the SONICWALL network interface software of the SMA 1000 series allows a hacker to bypass the TOTP authentication process.	13 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Workplace/Connect tunnel of the SONICWALL series SMA 1000 microprogrammable network interface devices allows a intruder to bypass the TOTP authentication process.	13 May 202600:00	–	bdu_fstec
Circl	CVE-2026-4112	8 Apr 202621:00	–	circl
Circl	CVE-2026-4113	9 Apr 202612:50	–	circl

08 Apr 2026 11:47Current

6Medium risk

Vulners AI Score6

CVSS 37.2

EPSS0.00613

CWE-89 CWE-204 CWE-176

sonicwall sma1000 series sql injection credential enumeration totp bypass