SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Tohle CVE jsem vytáhl z širšího textu článku: CVE-2026-102255. Neukazuju u něj proto fakta z katalogů výše, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 3

1. 7. 11. 2026 01:00 · BleepingComputer US nadpis události

   SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

   SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]

2. 6. 11. 2026 22:00 · Cyber Centre Kanada CA

   SonicWall security advisory (AV26-1133)

   Serial number: AV26-1133 Date: November 6, 2026 As of November 6, 2026, SonicWall is affected by a vulnerability in the following product: SonicOS prior to 7.3.4-7013 prior to 8.2.2-8015 SonicWall indicates that CVE-2026-19868 is being exploited. On November 6, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-19868 to their Known Exploited Vulnerabilities (KEV) Catalog. The Cyber Centre encourages users and administrators to review the provided web links and apply…

3. 6. 11. 2026 · zachyceno 21:30 · CISA KEV US

   SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability (CVE-2026-19868)

   CISA added CVE-2026-19868 to the Known Exploited Vulnerabilities catalog. Affected product: SonicWall SonicOS SSLVPN. Remediation due date: 2026-11-20.