Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-4112 1 Sonicwall 10 Sma1000, Sma6200, Sma6200 Firmware and 7 more 2026-05-14 7.2 High
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
CVE-2026-4113 1 Sonicwall 10 Sma1000, Sma6200, Sma6200 Firmware and 7 more 2026-05-14 7.2 High
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4114 1 Sonicwall 10 Sma1000, Sma6200, Sma6200 Firmware and 7 more 2026-05-14 6.6 Medium
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4116 1 Sonicwall 10 Sma1000, Sma6200, Sma6200 Firmware and 7 more 2026-05-14 7.2 High
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.