CVE-2026-4113 - AskarLabs CVE Database

CVE-2026-4113

Vendor Sonicwall

Product SMA1000

Weakness CWE-204

Published April 9, 2026

Last update April 13, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.

Key dates

02Disclosure timeline

April 9, 2026 CVE published

April 13, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-4113 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/204.html

Related vulnerabilities

04Related CVE

CVE-2026-33323 Parse Server: Email verification resend page leaks user existence CVE-2025-24980 Pimcore Admin Classic Bundle allows user enumeration CVE-2023-3221 User enumeration vulnerability in Roundcube Password Recovery Plugin CVE-2019-25338 Dokuwiki 2018-04-22b - Username Enumeration CVE-2025-12455 Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.

Identifiers

CVE CVE-2026-4113

CWE CWE-204

Affected versions

Vendor Sonicwall

Product SMA1000

Affected 12.4.3-03245 (platform-hotfix) and earlier versions.

Vendor Sonicwall

Product SMA1000

Affected 12.5.0-02283 (platform-hotfix) and earlier versions.