Multiple SonicWall Vulnerabilities Enable SQL Injection and Privilege Escalation Attacks

SonicWall published a critical advisory for four CVEs affecting SMA1000 appliances—most notably CVE‑2026‑4112 (CVSS 7.2) enabling SQL injection and privilege escalation, and CVE‑2026‑4114/4116 which allow TOTP/MFA bypasses—recommending immediate upgrade to patched firmware versions (12.4.3-03387+, 12.5.0-02624+) because no mitigations exist; SonicWall reports no evidence of active exploitation.