7.2 HighCWE-89
CVE-2026-4112
SonicWall SMA1000 vulnerability
SonicWallSMA1000
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.5%probability of exploitation in the next 30 days
Higher than 44% of scored CVEs
SeverityCVSS
7.2High
Description NVD
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Coverage 1 article · 1 outlet
- Palo Alto, SonicWall patch critical CVE-2026-0234 and other flawsSecurityWeek · first in our coverage · mentions it in passing