← Database
CVE-2026-4112
HIGH
CVSS: 7.2
Published: 2026-04-09
Modified: 2026-06-17
Description
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Affected Platforms
Sonicwall Sma6200Sonicwall Sma6210Sonicwall Sma7210 FirmwareSonicwall Sma6200 FirmwareSonicwall Sma6210 FirmwareSonicwall Sma8200VSonicwall Sma7200Sonicwall Sma7210Sonicwall Sma7200 Firmware