> TritonInfoSec News
Home / Nov 08, 2026 / Story
0
#1 SecurityWeek general November 07, 2026 at 10:16 UTC

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

By Eduard Kovacs

AI Summary

SonicWall patched CVE-2026-19868 in SonicOS, an actively exploited SSL-VPN authentication bypass that allows attackers with credentials for one login method to circumvent SAML-enforced MFA checks. The fix is part of a seven-vulnerability update batch, and the active exploitation status makes immediate patching critical for organizations using SonicWall VPN appliances.

Read full article → https://www.securityweek.com/sonicwall-patches-exp…

Relevance score: 88.0/100

# More from November 08

  1. 2
    Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot The Hacker News
  2. 3
    OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits The Hacker News
  3. 4
    Chainalysis says breach exposed credentials for all customers BleepingComputer
  4. 5
    Hackers pull off $133 million French bank heist via service provider BleepingComputer
  5. 6
    Authorities accuse trio of using AI deepfakes to defraud $129M from businesses CyberScoop
  6. 7
    QNAP says hackers breaching NAS devices in Plex2Shell attacks BleepingComputer
  7. 8
    Certificate authority DigiCert reports data breach involving business customer info The Record
  8. 9
    Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub The Hacker News
  9. 10
    Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack SecurityWeek