CVE-2026-4113

CVE-2026-4113 is an observable response discrepancy vulnerability affecting SonicWall SMA1000 series appliances that enables remote attackers to enumerate SSL VPN user credentials through response analysis. The vulnerability carries a CVSS score of 7.2 (HIGH) with a network-based attack vector requiring high privileges but no user interaction, resulting in potential compromise of confidentiality, integrity, and availability. Exploitation of this vulnerability is not currently documented in active threat campaigns, with no public exploit code availability reported and relatively low community attention reflected in its EPSS score of 0.00091. The FAUCET Risk Score of 47.0/100 indicates moderate concern, though the vulnerability is not included on the Known Exploited Vulnerabilities catalog. Organizations operating SonicWall SMA1000 series appliances should prioritize patching and implement access controls to restrict SSL VPN administrative access until updates are applied.