CVE-2026-4112: SQL Injection
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4112?
CVE-2026-4112 is considered a critical vulnerability due to its potential to allow privilege escalation for authenticated users.
How do I fix CVE-2026-4112?
To fix CVE-2026-4112, update your SonicWall SMA1000 series appliances to the latest firmware version provided by SonicWall.
Who is affected by CVE-2026-4112?
CVE-2026-4112 affects users of SonicWall SMA1000 series appliances who have read-only administrator privileges.
What type of vulnerability is CVE-2026-4112?
CVE-2026-4112 is an SQL Injection vulnerability that allows attackers to exploit improper neutralization of special elements in SQL commands.
What is the attack vector for CVE-2026-4112?
The attack vector for CVE-2026-4112 involves authenticated remote attackers leveraging SQL injection techniques to gain higher privileges.