PT-2026-31394 · Sonicwall · Sma1000 Series

Published 2026-04-08 · Updated 2026-05-17 · CVE-2026-4112

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 series appliances

Description An SQL injection flaw exists in SonicWall SMA1000 series appliances. A remote authenticated attacker with read-only administrator privileges can escalate privileges to primary administrator. The issue is due to improper neutralization of special elements used in an SQL command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-06577

CVE-2026-4112

Affected Products

Sma1000 Series

References · 13

• 🔥 https://github.com/Hann1bl3L3ct3r/CVE-2026-4112 · Exploit
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4112 · Security Note
• https://bdu.fstec.ru/vul/2026-06577 · Security Note
• https://t.me/cveNotify/163513 · Telegram Post
• https://twitter.com/f1tym1/status/2055906138969833929 · Twitter Post
• https://twitter.com/CVEnew/status/2042302834608390366 · Twitter Post
• https://twitter.com/infoflowcloud/status/2042304226764693609 · Twitter Post
• https://t.me/netlas/546 · Telegram Post
• https://twitter.com/autumn_good_35/status/2042599898412199974 · Twitter Post
• https://twitter.com/Netlas_io/status/2042544185371136154 · Twitter Post
• https://reddit.com/r/sonicwall/comments/1sfz2pq/sma1000_vulnerabilities · Reddit Post
• https://twitter.com/VulmonFeeds/status/2042356973664973077 · Twitter Post