poslední zpráva · zachyceno
SPOJENO AI KEV ✓ (1 z 7) EPSS 0.01 (nejvyšší)
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
SonicWall FI US CA
CVE v události 7
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-107154 | 8.8 3.1 · CISA-ADP | – | 0.01 |
| CVE-2026-107155 | 8.8 3.1 · CISA-ADP | – | 0.01 |
| CVE-2026-19703 | 5.1 3.1 · CISA-ADP | – | < 0.01 |
| CVE-2026-19868 | 7.5 3.1 · CISA-ADP | KEV ✓ | 0.01 |
| CVE-2026-77708 | 5.9 3.1 · CISA-ADP | – | 0.01 |
| CVE-2026-77709 | 5.9 3.1 · CISA-ADP | – | 0.01 |
| CVE-2026-82308 | 7.5 3.1 · CISA-ADP | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.
Tohle CVE jsem vytáhl z širšího textu článku: CVE-2026-102255. Neukazuju u něj proto fakta z katalogů výše, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 4
-
· zachyceno · NCSC-FI FI
SonicWall SonicOS Affected By Multiple Vulnerabilities
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-77708, CVE-2026-77709, CVE-2026-82308, CVE-2026-107154, CVE-2026-107155, CVE-2026-19703, CVE-2026-19868, Summary: SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. The vulnerability, tracked as CVE-2026-19868, allows attackers with valid credentials for an alternate…
-
· BleepingComputer US nadpis události
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
-
· Cyber Centre Kanada CA
SonicWall security advisory (AV26-1133)
Serial number: AV26-1133 Date: November 6, 2026 As of November 6, 2026, SonicWall is affected by a vulnerability in the following product: SonicOS prior to 7.3.4-7013 prior to 8.2.2-8015 SonicWall indicates that CVE-2026-19868 is being exploited. On November 6, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-19868 to their Known Exploited Vulnerabilities (KEV) Catalog. The Cyber Centre encourages users and administrators to review the provided web links and apply…
-
· zachyceno · CISA KEV US
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability (CVE-2026-19868)
CISA added CVE-2026-19868 to the Known Exploited Vulnerabilities catalog. Affected product: SonicWall SonicOS SSLVPN. Remediation due date: 2026-11-20.