CVE-2026-4113

—

CVSS 3.1

7.2 high

EPSS

<1%p30

Published

Apr 9, 2026 (Apr 9, 2026)

Modified

Jun 17, 2026

Description

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.

Vendors: sonicwall
Products: sma6210 firmware, sma8200v, sma7200 firmware, sma7210 firmware, sma6200 firmware
Weakness: CWE-204
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.