CVE-2026-4116

Description

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003