CVE-2026-4112
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Debilidad
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Productos afectados
- sonicwall sma6210_firmware
- sonicwall sma6210
- sonicwall sma6200_firmware
- sonicwall sma6200
- sonicwall sma7200_firmware
- sonicwall sma7200
- sonicwall sma7210_firmware
- sonicwall sma7210
Referencias
Encuentra el fallo antes que un atacante.
Inicia sesión con GitHub y ejecuta tu primera auditoría en menos de un minuto. El plan gratuito no requiere tarjeta de crédito.