CVE-2026-4112
SQL injection in Sonicwall Sma6210 Firmware
CVSS score
7.2
EPSS probability
%0.6
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator. (★0)
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:32EPSS %100
9.8
CVE-2024-53704 Actively exploitedImproper authentication in SonicWall SonicOS
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2021-20021 Actively exploitedImproper privilege management in SonicWall Email Security
Workaround Public Exploits:2EPSS %89
7.5
CVE-2019-7481 Actively exploitedSQL injection in SonicWall SMA100
Workaround Public Exploits:1EPSS %100
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:28EPSS %100
9.8
CVE-2021-20016 Actively exploitedSQL injection in SonicWall SMA100
WorkaroundEPSS %40
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4112"