CISA adds actively exploited SonicWall SonicOS SSLVPN flaw CVE-2026-19868 to KEV catalogue
VULNERABILITYCVE-2026-19868redteam/daily · 2 sources
- Severity
- High
- Highest CVSS
- 7.5
- Exploited
- Not known
- Sources
- 2
What happened
CISA has added CVE-2026-19868, a single-factor authentication vulnerability in the SonicOS SSLVPN component of SonicWall products, to its Known Exploited Vulnerabilities catalogue based on evidence of active exploitation. Federal agencies must prioritise rapid remediation under BOD 26-04, including checking for compromise where the patch was applied late. CISA encourages all organisations to follow the same risk-based approach.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Prioritise patching CVE-2026-19868 on SonicWall SonicOS SSLVPN systems.
- Check whether SonicOS SSLVPN appliances are publicly exposed and review them first.
- Federal agencies should check whether systems were compromised before the patch was applied.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 3 updates
Who reported · 2 outlets
CISA AlertsCanadian Centre for Cyber Security
Who and what is in it
Products