CVE-2026-4113

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.

Score

CVSS 3.1 7.2 High

Status

Analyzed - PSIRT@sonicwall.com

Published

2026-04-09

Last modified

2026-10-26

Weaknesses

CWE-204

Affected products

• Sma1000 (Sonicwall)
• Sma6200 Firmware (Sonicwall)
• Sma6210 Firmware (Sonicwall)
• Sma7200 Firmware (Sonicwall)
• Sma7210 Firmware (Sonicwall)
• Sma8200v (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003