NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-4112
Summary

Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.

Publication Date April 10, 2026, 12:16 a.m.
Registration Date April 15, 2026, 11:34 a.m.
Last Update April 14, 2026, 12:02 a.m.
Related information, measures and tools
Common Vulnerabilities List