Vulnerability intelligence

CVE-2026-4112

Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.

CVSS Score

7.2

High

EPSS — Exploit Probability

0.6%

Riskier than 47% of all CVEs · checked 2026-09-06

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories