SonicWall Security Updates – 09 April 2026

The addressed vulnerabilities could allow the remote attacker to bypass authentication, gain elevated privileges, perform denial-of-service attacks, conduct cross-site scripting attacks, enumerate SSL VPN user credentials, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. SonicWall SMA 1000 Privilege Escalation via SQL Injection Vulnerability (CVE- 2026-4112):

• CVSS: 7.2
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Privileges

2. SonicWall SMA 1000 Unicode Possible AMC TOTP Bypass Vulnerability (CVE- 2026-4114):

• CVSS: 6.6
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: High
• User Interaction: None
• Consequences: Bypass Security