CISA Adds Actively Exploited SonicWall SonicOS SSLVPN Vulnerability to KEV Catalog
Summary
CISA added CVE-2026-19868, a SonicWall SonicOS SSLVPN single-factor authentication vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation.
Key points
- CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities (KEV) Catalog.
- The vulnerability affects single-factor authentication in SonicWall SonicOS SSLVPN.
- CISA says the addition is based on evidence of active exploitation.
- CISA urges organizations to prioritize remediation of KEV vulnerabilities; federal civilian agencies have additional requirements under BOD 26-04.
Article Details
- Vulnerability Types
- Use of single-factor authentication
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown