Vendors and CVEs › CVEs › CVE-2026-19868
CVE-2026-19868: what it is, who is affected and what to do
CISA added a SonicWall SonicOS SSL-VPN flaw (CVE-2026-19868) to its Known Exploited Vulnerabilities Catalog because of active exploitation. The flaw is the use of single-factor authentication. A related report describes a multi-factor authentication bypass exploited in attacks.
- Known exploited. Yes, on CISA’s list of exploited flaws.
- Records. CVE-2026-19868 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical Known exploited
SonicWall VPN flaw exploited and added to CISA's known-exploited list
CISA added a SonicWall SonicOS SSL-VPN flaw (CVE-2026-19868) to its Known Exploited Vulnerabilities Catalog because of active exploitation. The flaw is the use of single-factor authentication.