Skip to content
OpenAdvisories
High · 7.2 CVE-2026-4116 EUVD-2026-20908GHSA-98v3-fwpf-r4w2

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/…

Published Apr 9, 2026 · Updated Apr 13, 2026 · Assigned by sonicwall

Vendor: SonicWall Product: SMA1000 Category: Network devices

Description

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

Affected products

VendorProductAffectedFixed
SonicWall SMA1000 12.4.3-03245 (platform-hotfix) and earlier versions., 12.5.0-02283 (platform-hotfix) and earlier versions. —

Advisories 1

References