← Database

CVE-2026-4116

HIGH CVSS: 7.2 Published: 2026-04-09 Modified: 2026-06-17

Description

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

Affected Platforms

Sonicwall Sma6200Sonicwall Sma6210Sonicwall Sma7210 FirmwareSonicwall Sma6200 FirmwareSonicwall Sma6210 FirmwareSonicwall Sma8200VSonicwall Sma7200Sonicwall Sma7210Sonicwall Sma7200 Firmware

Weakness Type

CWE-176

References