CVE-2026-4114

UNKNOWN

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication

Published Apr 9, 2026

Modified 4 days ago

Details

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.

References

ADVISORY

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-4114

Weakness Type (CWE)

Other

CWE-176

Ecosystems

Timeline

PublishedApr 9, 2026

ModifiedApr 13, 2026