CVE-2026-4116

No fix known EPSS <1%CVSS 7.2

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

Published 2026-04-09 · CVE record · OSV

Products: SonicWall SMA1000