HIGH🇵🇱 Wersja polska

CVE-2026-4113

CVSS 7.2v3.1pub. 2026-04-09upd. 2026-05-14

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Sonicwall Sma6200

    HW
    Sonicwall
    all versions

  • Sonicwall Sma6200 Firmware

    OS
    Sonicwall
    12.5.0 – 12.5.0-02624 (excl.)< 12.4.3-03387

  • Sonicwall Sma6210

    HW
    Sonicwall
    all versions

  • Sonicwall Sma6210 Firmware

    OS
    Sonicwall
    < 12.4.3-0338712.5.0 – 12.5.0-02624 (excl.)

  • Sonicwall Sma7200

    HW
    Sonicwall
    all versions

  • Sonicwall Sma7200 Firmware

    OS
    Sonicwall
    12.5.0 – 12.5.0-02624 (excl.)< 12.4.3-03387

  • Sonicwall Sma7210

    HW
    Sonicwall
    all versions

  • Sonicwall Sma7210 Firmware

    OS
    Sonicwall
    12.5.0 – 12.5.0-02624 (excl.)< 12.4.3-03387

  • Sonicwall Sma8200v

    APP
    Sonicwall
    12.5.0 – 12.5.0-02624 (excl.)< 12.4.3-03387
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
VPN
CWE
References

Related vulnerabilities

CVE-2026-83548CRITICAL10.0⚠ KEVsame product

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an uninten...

CVE-2026-15409CRITICAL10.0⚠ KEVPL ✓same product

SSRF w SonicWall SMA1000 — nieuwierzytelniony dostęp do wewnętrznych zasobów

CVE-2025-23006CRITICAL9.8⚠ KEVPL ✓same product

SonicWall SMA1000 — pre-auth deserialization umożliwiający RCE

CVE-2026-83549HIGH7.8⚠ KEVsame product

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...

CVE-2026-15410HIGH7.2⚠ KEVPL ✓same product

SonicWall SMA1000 AMC – Code Injection umożliwiający wykonanie poleceń OS