Search/CVE-2026-4114
● CVE — Medium

CVE-2026-4114

VendorsonicwallProductsma6200 firmware, sma6210 firmware, sma7200 firmware, sma7210 firmware, sma8200vDiscoveredApr 9, 2026UpdatedMay 14, 2026

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.

View graph Watch Export
CVSS v3.1
6.6 MEDIUM
EPSS
0.60%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 25, 2026 → Oct 26, 2026
▼ 0.14pp
0.74% → 0.60% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Connections
6 relationships
Timeline
disclosure → media coverage
Apr 9, 2026
Disclosure — published as a CVE record. · last revised by NVD May 14, 2026