Skip to content
NewA calmer, faster ZeroHour
AdvisoryhighExploited in the wild

CISA adds CVE-2026-19868 to Known Exploited Vulnerabilities Catalog

Original title: CISA Adds One Known Exploited Vulnerability to Catalog

CISA Advisoriesby CISA ()1 min read1
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

CISA has added CVE-2026-19868, affecting SonicWall SonicOS, to its KEV Catalog due to active exploitation.

CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability in SonicWall SonicOS SSL VPN allows use of single-factor authentication. It poses significant risks to the federal enterprise. Federal agencies must prioritize remediation per BOD 26-04.

Key facts
  • CVE-2026-19868 added to KEV Catalog
  • Affects SonicWall SonicOS
  • Active exploitation confirmed
  • BOD 26-04 requires prioritization for federal agencies
Security assessment · AI, from the articleExploited in the wild

Impact: SSL VPN use of single-factor authentication

What to do
  1. 1.Upgrade SonicWall SonicOS to fixed versions
  2. 2.Follow CISA KEV guidance for federal agencies
Analyze CVE-2026-19868 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-19868
Tags
cisasonicwallsonicossslvpnkev
Vendors
SonicWall
Products
SonicOS
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-19868
SAML bypass in SonicWall SonicOS SSLVPN
7.5<1%KEVPoC
KEV

From the original article

1 min read at cisa.gov

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.