SonicWall SonicOS prior to 7.3.4-7013 and 8.2.2-8015 affected by exploited CVE-2026-19868
Original title: SonicWall security advisory (AV26-1133)
CISA added CVE-2026-19868 to KEV Catalog on November 6, 2026; SonicWall SonicOS versions prior to 7.3.4-7013 and 8.2.2-8015 are being exploited.
SonicWall SonicOS versions prior to 7.3.4-7013 and 8.2.2-8015 are affected by CVE-2026-19868 which the vendor states is being exploited. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog on November 6, 2026. The Canadian Centre for Cyber Security issued advisory AV26-1133 urging users to apply updates as they become available.
- CVE-2026-19868 is being exploited
- CISA added CVE-2026-19868 to KEV Catalog
- Affected SonicOS versions: prior to 7.3.4-7013 and prior to 8.2.2-8015
- SonicWall SonicOS SSL VPN uses single-factor authentication
Impact: SSL VPN use of single-factor authentication
- 1.Apply SonicWall update to 7.3.4-7013 or 8.2.2-8015
- 2.Follow CISA KEV remediation guidance
- CVEs
- CVE-2026-19868
- Vendors
- SonicWall
- Products
- SonicOS
- Organizations
- Canadian Centre for Cyber SecurityCISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19868 | SAML bypass in SonicWall SonicOS SSLVPN | 7.5 | <1% | KEVPoC | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1133 Date: November 6, 2026 As of November 6, 2026, SonicWall is affected by a vulnerability in the following product: SonicOS prior to 7. 3. 4-7013 prior to 8.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.