TOTP Bypass via Unicode Handling Flaw in SonicWall SMA

Publication date: 2026-04-09

Last updated on: 2026-04-13

Assigner: SonicWALL, Inc.

Description

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-09

Last Modified

2026-04-13

Generated

2026-07-06

AI Q&A

2026-04-09

EPSS Evaluated

2026-07-05

NVD

CVE-2026-4116

EUVD

EUVD-2026-20908

Affected Vendors & Products

Vendor	Product	Version / Range
sonicwall	sma1000	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-176	The product does not properly handle when an input contains Unicode encoding.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper handling of Unicode encoding in SonicWall SMA1000 series appliances. It allows a remote authenticated SSLVPN user to bypass the Workplace/Connect Tunnel TOTP (Time-based One-Time Password) authentication mechanism.

Impact Analysis

An attacker who is a remote authenticated SSLVPN user could exploit this vulnerability to bypass the TOTP authentication, potentially gaining unauthorized access to the network or resources that are protected by this authentication method.

Hi! I’m here to help you understand CVE-2026-4116. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70