Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks. The vulnerability, tracked as CVE-2026-19868 (CVSS score: 7.1 / 7.5), has been described as an authentication reinforcement

For more information, read the full story at the original source: The Hacker News ↗

Vulnerabilities in this story

• CVE-2026-109593 SonicWall Global Management System EPSS 0.5% 9.1Critical
• CVE-2026-107154 SonicWall SonicOS EPSS 0.6% 8.8High
• CVE-2026-107155 SonicWall SonicOS EPSS 0.7% 8.8High
• CVE-2026-19868 KEV · fix by 2026-11-20 SonicWall SonicOS EPSS 0.6% 7.5High
• CVE-2026-82308 SonicWall SonicOS EPSS 0.5% 7.5High
• CVE-2026-109594 SonicWall Global Management System EPSS 0.3% 6.8Medium

Also reported by

• SecurityWeek: SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins ↗
• Security Affairs: U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog ↗