Intelligence online17 sources monitored9 actively exploited 7d26 published 24hChecked recently
Product

SonicOS SSLVPN

Made by SonicWall. 1 of its vulnerabilities are known to have been exploited.

Coverage

HighPatchExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA added CVE-2026-19868 (SonicWall SonicOS SSLVPN) to its Known Exploited Vulnerabilities catalog on November 6, 2026, which means there is reliable evidence of exploitation in the wild. SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful…

Why it matters

CISA lists this as exploited in the wild. Unpatched SonicWall firewalls & SMA systems are exposed to active attacks now.

Patch

Apply the vendor's security update for SonicWall firewalls & SMA.

CISA Known Exploited Vulnerabilities · 2 sources
SMBEnterpriseSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Added to CISA KEVUpdateCVE-2026-19868

    CVE-2026-19868 added to CISA KEV: SonicWall SonicOS SSLVPN, SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-19868

SonicWall SonicOS SSLVPN

SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Added Nov 6, 2026Fed. due Nov 20, 2026Coverage →