Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 9 products
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure2 |
| 2026-04-10 | 1 | Disclosure1 |
| 2026-05-17 | 1 | Disclosure1 |
CVE-2026-4112, CVE-2026-4113, CVE-2026-4114, CVE-2026-4116 SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003
Post summary
The text announces that multiple CVEs (CVE-2026-4112, CVE-2026-4113, CVE-2026-4114, CVE-2026-4116) affect SonicWall SMA1000 Series appliances, pointing to a vendor PSIRT advisory for further details.
CVE-2026-4116 | SonicWall SMA1000 Tunnel TOTP Authentication unicode encoding (SNWLID-2026-0003 / EUVD-2026-20908) https://ift.tt/hJRFLuQ A vulnerability was found in SonicWall SMA1000. It has been rated as critical. Affected by this vulnerability is an unknown functionality o…
Post summary
The entry announces a critical Unicode encoding vulnerability in SonicWall SMA1000’s TOTP authentication, but offers no proof of concept, exploit code, active exploitation evidence, or remediation guidance.
CVE-2026-4116 Remote Authenticated TOTP Authentication Bypass in SonicWall SMA1000 Series Appliances https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4116
Post summary
The text announces a remote authenticated TOTP bypass vulnerability in SonicWall SMA1000 appliances but includes no PoC, exploit code, active exploitation evidence, or patch details.
CVE-2026-4116 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentic… https://www.cve.org/CVERecord?id=CVE-2026-4116
Post summary
The CVE-2026-4116 vulnerability is an improper Unicode handling flaw in SonicWall SMA1000 appliances that enables authenticated SSLVPN users to bypass TOTP authentication.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | sonicwall | sma6200 | - | - | - |
| OS | sonicwall | sma6200_firmware | - | - | - |
| HW | sonicwall | sma6210 | - | - | - |
| OS | sonicwall | sma6210_firmware | - | - | - |
| HW | sonicwall | sma7200 | - | - | - |
| OS | sonicwall | sma7200_firmware | - | - | - |
| HW | sonicwall | sma7210 | - | - | - |
| OS | sonicwall | sma7210_firmware | - | - | - |
| App | sonicwall | sma8200v | - | - | - |