CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
09 November 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks.
The vulnerability, tracked as CVE-2026-19868 (CVSS score: 7.1/ 7.5), has been described as an authentication reinforcement