Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Sonicwall
  • Sma1000

No data.

No data.

References
Link Providers
https://www.spirityenterprise.com/virtual-ciso spirity
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003 cve-icon cve-icon
History

Mon, 13 Apr 2026 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 10 Apr 2026 10:00:00 +0000

Type Values Removed Values Added
Title Unicode Handling Enables MFA Bypass on SonicWall SMA1000

Fri, 10 Apr 2026 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Sonicwall
Sonicwall sma1000
Vendors & Products Sonicwall
Sonicwall sma1000

Thu, 09 Apr 2026 15:00:00 +0000

Type Values Removed Values Added
Description Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
Weaknesses CWE-176
References
cve-icon MITRE

Status: PUBLISHED

Assigner: sonicwall

Published:

Updated: 2026-04-13T13:04:16.553Z

Reserved: 2026-03-13T11:57:22.758Z

Link: CVE-2026-4114

cve-icon Vulnrichment

Updated: 2026-04-13T13:00:25.765Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-04-09T15:16:13.817

Modified: 2026-04-13T15:02:47.353

Link: CVE-2026-4114

cve-icon Redhat

No data.