Vendors and CVEs › Vendors › SonicWall
SonicWall: industrial cyber security news and vulnerabilities
4 stories in Industrial Cyber Brief name SonicWall, 1 on CISA’s list of known exploited flaws, from Thursday 5 November 2026 to Tuesday 10 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Medium
SonicWall releases fixes for seven flaws, including VPN login bypass
New: SonicWall has released fixes for the SSL-VPN flaw that bypasses multi-factor authentication (MFA), along with six other flaws. The SSL-VPN flaw was covered earlier as exploited and on CISA's known-exploited list.
Medium
Hong Kong CERT lists multiple flaws in SonicWall SonicOS
The Hong Kong Computer Emergency Response Team Coordination Centre published an advisory titled "SonicWall SonicOS Multiple Vulnerabilities". The report gives no flaw details, versions or fixes.
Critical Known exploited
SonicWall VPN flaw exploited and added to CISA's known-exploited list
CISA added a SonicWall SonicOS SSL-VPN flaw (CVE-2026-19868) to its Known Exploited Vulnerabilities Catalog because of active exploitation. The flaw is the use of single-factor authentication.
Critical
SonicWall will not patch two flaws in end-of-life management software
SonicWall warned of two flaws in its end-of-life Global Management System (GMS) and said it will not patch them.