US CISA Warns of Exploited SonicWall SSL VPN Flaw and Adds It to KEV Catalog
Cybersecurity and privacy
On November 6, US CISA added SonicWall SonicOS SSL VPN authentication vulnerability CVE-2026-19868 to its KEV catalog based on evidence of active exploitation, mandating federal agencies to patch or mitigate within 14 days. Canada's cyber centre also urged prompt updates. SonicWall has issued patched versions for Gen 7 and Gen 8 firewalls.
The US Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) catalog on November 6, adding SonicWall SonicOS SSL VPN authentication vulnerability CVE-2026-19868. CISA stated it has evidence of active exploitation and required US federal agencies to complete remediation or mitigation within 14 days. On the same day, the Canadian Centre for Cyber Security issued an advisory urging users and system administrators to apply security updates promptly. According to SonicWall, affected products include Gen 7 and Gen 8 firewalls, and patched firmware versions SonicOS 7.3.4-7013 and 8.2.3-8015 have been released.
Key takeaways
- CISA added SonicOS SSL VPN flaw CVE-2026-19868 to KEV on November 6 after confirming active exploitation, ordering federal agencies to remediate within 14 days.
- The Canadian Centre for Cyber Security issued an advisory on the same day urging prompt deployment of security updates.
- Affected devices include SonicWall Gen 7 and Gen 8 firewalls, with official patches released as SonicOS 7.3.4-7013 and 8.2.3-8015.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.