medium6.6
CVE-2026-4114
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
Impact
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma6210 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma6200 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma7200 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma7210 Firmware | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |
| Sonicwall | Sma8200v | before 12.4.3-03387 from 12.5.0 before 12.5.0-02624 |