CVE-2026-4113
HighSummary
The SonicWall SMA1000 series appliances have an observable response discrepancy vulnerability that allows a remote attacker to enumerate SSL VPN user credentials.
Risk Assessment
This vulnerability could lead to unauthorized access to user accounts, posing a significant security threat to the organization.
Recommendation
It is recommended to update the devices to the latest software version and monitor logs for potential attack attempts.
Other vulnerabilities in SonicWall SMA1000 series appliances
See all- CVE-2026-4116High
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
- CVE-2026-4112High
The SonicWall SMA1000 series appliances are vulnerable to SQL injection, allowing a remote attacker with read-only administrator privileges to escalate to full administrator rights.
Original NVD description (English source)
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.