Occurred Nov 6, 2026, 12:00:00 AM UTC

First published Nov 7, 2026, 12:55:15 AM UTC · Last updated Nov 7, 2026, 12:55:15 AM UTC

CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Reported by CISA Known Exploited Vulnerabilities

The source describes a SonicWall SonicOS SSLVPN vulnerability that may allow SAML authentication controls, including enforced multi-factor authentication, to be bypassed. It directs stakeholders to apply vendor mitigations or discontinue use if mitigations are unavailable.

Share this event

Follow: Events in United States

Manage follows

Why it matters

The vulnerability may bypass authentication controls, and the source calls for mitigation in accordance with vendor instructions.

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence: 6/10How certain the assessment is based on the clarity and evidence in the cited reporting.
Geographic reach: 2/10How widely the event reaches, from a local area (1) to worldwide impact (10).
Global importance: 3/10The event's broader significance, from limited importance (1) to major global importance (10).
Impact magnitude: 3/10The scale or severity of the real-world impact, from minor (1) to extreme (10).
Urgency: 6/10How time-sensitive the event is, from low urgency (1) to immediate attention needed (10).

Primary official sources

CISA Known Exploited Vulnerabilities CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Report an issue

Read our editorial process and corrections policy.

Continue exploring

Related developments reported in the last 30 days. These are not necessarily ongoing incidents.

Same topic
What comes after networked authoritarianism?Nov 5, 2026, 4:17 PM UTC
An October spotlight explored relationships between technology companies and political actors across the Global Majority. The source was published on November 5, 2026.
Same topic
120 Dasan Call Foundation Expands Foreign-Language Services to Include Text MessagingNov 5, 2026, 12:35 AM UTC
Seoul’s 120 Dasan Call added English text messaging to its existing multilingual phone services. The service provides information about Seoul administrative services and daily life on weekdays from 9 AM to 6 PM.
Same topic
CVE-2024-27834: Apple Multiple Products Improper Authentication VulnerabilityNov 4, 2026, 12:00 AM UTC
The source reports an improper authentication vulnerability in multiple Apple products that could allow an attacker with arbitrary read and write capability to bypass pointer authentication. It advises applying mitigations under applicable CISA guidance or discontinuing use if mitigations are unavailable.
Same topic
CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityNov 3, 2026, 12:00 AM UTC
The source describes a WordPress Core TOCTOU race condition that could allow unauthenticated code execution on the server during a full-package upgrade. It calls for applying mitigations in accordance with vendor instructions and CISA guidance.
Same topic
Podcast: The laser that could break the laws of physicsNov 2, 2026, 9:07 PM UTC
A podcast features researcher Jonathan Zuegel discussing high-powered laser research in the United States and the NSF Optical Parametric Amplifier Line (NSF OPAL) facility. The excerpt ends before providing further details about the facility.
Same topic
Connecting Cheonggyecheon Stream’s Nights with Autonomous Mobility—Cheonggye A01 to Begin Nighttime Service on October 22Nov 2, 2026, 5:49 AM UTC
A driverless autonomous bus is scheduled to begin nighttime service on October 22, running a 4.8 km round-trip between Cheonggye Plaza and Gwangjang Market. The source says it will make nine trips daily at 30-minute intervals.

Loading related developments…

Explore events in united states