high7.2
CVE-2026-4112
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attac…
Impact
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma6210 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma6200 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma7200 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma7210 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma8200v | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |