CVE-2026-4112
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Zwakheid
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Getroffen producten
- sonicwall sma6210_firmware
- sonicwall sma6210
- sonicwall sma6200_firmware
- sonicwall sma6200
- sonicwall sma7200_firmware
- sonicwall sma7200
- sonicwall sma7210_firmware
- sonicwall sma7210
Bronnen
Vind de bug voordat een aanvaller dat doet.
Log in met GitHub en start je eerste audit binnen een minuut. Voor het gratis abonnement is geen creditcard nodig.