Known vulnerabilities in SonicWall SMA 1000 12.4.3-02963
Vendor:
SonicWall
Software:
SonicWall SMA 1000
Version:
12.4.3-02963
Software CPE:
cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*
Website:
https://www.sonicwall.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125516 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-4112 |
CWE-89 | Low | 12.4.3-03387, 12.5.0-02624 | 08.04.2026 |
SB20260408177 |
||
| #VU125517 - Observable Response Discrepancy CVE-2026-4113 |
CWE-204 | Low | 12.4.3-03387, 12.5.0-02624 | 08.04.2026 |
SB20260408177 |
||
| #VU125518 - Improper Handling of Unicode Encoding CVE-2026-4114 |
CWE-176 | Low | 12.4.3-03387, 12.5.0-02624 | 08.04.2026 |
SB20260408177 |
||
| #VU125519 - Improper Handling of Unicode Encoding CVE-2026-4116 |
CWE-176 | Low | 12.4.3-03387, 12.5.0-02624 | 08.04.2026 |
SB20260408177 |
||
| #VU120180 - Missing Authorization CVE-2025-40602 |
CWE-862 | High | 12.4.3-03245, 12.5.0-02283 | 17.12.2025 |
SB2025121748 |