The agency added the SonicWall single-factor authentication vulnerability, CVE-2026-19868, to its catalog of known exploited vulnerabilities, making it a priority for risk-based remediation.
CISA reported on 6 November that it had added a SonicWall SonicOS SSL-VPN vulnerability, identified as CVE-2026-19868, to its Known Exploited Vulnerabilities Catalog after finding evidence that attackers were actively exploiting it. The agency identifies the flaw as a single-factor authentication vulnerability.
BleepingComputer said SonicWall fixed the flaw in SonicOS versions 7.3.4-7013 and 8.2.3-8015. SonicWall says no workarounds are available. The updates also fix 6 additional SonicOS vulnerabilities.
The flaw affects only SonicOS SSL-VPN services configured to use SAML, an authentication method. An attacker with valid credentials for another authentication method can bypass SAML controls, potentially including a requirement for more than one form of verification. The vulnerability has a CVSS severity score of 7.1.
| Generation | Affected versions | Fixed version |
|---|---|---|
| Gen7 | 7.3.3-7015 and earlier | 7.3.4-7013 |
| Gen8 | 8.2.2-8015 and earlier | 8.2.3-8015 |
CISA ordered federal civilian executive branch agencies to secure affected systems by 20 November 2026.
CISA says its binding directive 26-04 requires those agencies to prioritize rapid fixes for high-risk cataloged vulnerabilities on publicly exposed systems when exploitation would give an attacker total control. Agencies defer action on lower-risk vulnerabilities. The directive also sets expectations for when agencies must check whether a system was compromised before it was patched.
Microsoft declined to renew the contract and has been switching off rented capacity, Bloomberg says, as the company reassesses its cloud partnerships.
The directive applies only to those federal agencies. CISA encourages other organizations to manage vulnerabilities based on risk and prioritize fixes for flaws in the catalog.
2 min
The rollout began on 6 November with specialized models trained using Wonder for Muse and Meta AI users; subscribers retain access to Wonder itself for harder tasks.
2 min
The department plans to use a superintelligence (SI) tool it built to check its November 10 crop report, after errors in September estimates weakened trust in data that can move markets.
2 min
Added the affected and fixed versions, exploitation conditions, severity score, additional fixes, lack of workarounds and federal deadline.
