CVE-2026-4116

CVE-2026-4116 is a Unicode encoding handling flaw affecting SonicWall SMA1000 series appliances that enables authenticated SSLVPN users to circumvent TOTP authentication on Workplace/Connect Tunnel functions. The vulnerability carries a CVSS score of 7.2 (High) with a network-based attack vector requiring high privilege credentials and no user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability. Exploitation status indicates low current threat activity, with no evidence of active exploitation in the wild, no documented public exploits, and minimal community attention reflected by its position in the lower percentile of vulnerability severity rankings. The moderate FAUCET Risk Score of 47.0 suggests this warrants patching but is not among the most critical threats requiring immediate intervention. Organizations running affected SonicWall appliances should prioritize applying available patches, particularly if supporting high-value remote access scenarios where authentication bypass could enable lateral movement or data exfiltration.