CVE-2026-4112 is a SQL Injection vulnerability in SonicWall SMA1000 series appliances. It allows a remote authenticated attacker with read-only administrator privileges to escalate their privileges to primary administrator. The vulnerability involves improper neutralization of special elements in SQL commands. The CVSS score is 7.2, indicating a high severity impact with potential for full confidentiality, integrity, and availability compromise.