Summary

U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-19868 is an authentication bypass vulnerability affecting the SSL…

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-19868 KEV · fix by 2026-11-20 SonicWall SonicOS EPSS 0.6% 7.5High

Also reported by

• The Hacker News: CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation ↗
• Help Net Security: Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) ↗
• SecurityWeek: SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins ↗