Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
CVE-2026-4112
NONE
EPSS 0.07%
Updated Apr 09, 2026
Sonicwall
CVE Details
CVE ID
CVE-2026-4112
Published Date
Apr 09, 2026
Vendor
Sonicwall
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.07%
Likelihood of exploitation in next 30 days
Percentile:
21.9th percentile (higher than 21.9% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory