Tuesday, 10 November 2026

Updated 3m agoSaved

Next edition

16:32

Headlines

Top StoriesVanderbilt University hit in BYOD ransomware attack, data theft claimed
Threat IntelligenceAttackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Data BreachesVanderbilt University hit in BYOD ransomware attack, data theft claimed
Bugs and PatchesN-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
Cybercrime and ScamsUsed vehicle and cheap loan scam busted! Cyber fraud operation in 23 provinces: 367 arrests
Nation State HackingThe Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)
Enterprise SecurityYou can change Windows settings directly from a search now – how to try it
Privacy and ComplianceSpain’s data protection regulator clarifies biometric risk and necessity
Consumer AdviceWe’re Asking an Appeals Court to Require a Warrant for ALPR Searches
Incident ResponseMetasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more

Top StoriesVanderbilt University hit in BYOD ransomware attack, data theft claimed
Threat IntelligenceAttackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Data BreachesVanderbilt University hit in BYOD ransomware attack, data theft claimed
Bugs and PatchesN-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
Cybercrime and ScamsUsed vehicle and cheap loan scam busted! Cyber fraud operation in 23 provinces: 367 arrests
Nation State HackingThe Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)
Enterprise SecurityYou can change Windows settings directly from a search now – how to try it
Privacy and ComplianceSpain’s data protection regulator clarifies biometric risk and necessity
Consumer AdviceWe’re Asking an Appeals Court to Require a Warrant for ALPR Searches
Incident ResponseMetasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more

Threat Intelligence

CISA adds SonicWall SSLVPN flaw to known exploited vulnerabilities catalog

The Cybersecurity and Infrastructure Security Agency added a SonicWall SonicOS SSLVPN flaw to its catalog of known exploited vulnerabilities following evidence of active exploitation.

FTMQ Security, written by our newsroom7 November 2026 at 00:010 views

Share

Watch: this report in under a minute. The presenter and voice are SI-generated. More video reports

The Cybersecurity and Infrastructure Security Agency added a SonicWall SonicOS SSLVPN vulnerability to its Known Exploited Vulnerabilities catalog on November 6, 2026. CISA Alerts reported that the security flaw is identified as CVE-2026-19868. The agency confirmed that the action was based on evidence of active exploitation in the wild. [1]

The flaw involves the use of single-factor authentication within SonicWall SonicOS SSLVPN. According to CISA Alerts, this vulnerability type serves as a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. [1]

A vulnerability refers to the state of being exposed to the possibility of being attacked or harmed. In informational contexts, systemic vulnerabilities exist where system flaws enable unauthorized access or failure under stress. [7][8]

CISA Alerts stated that Binding Operational Directive 26-04 establishes vulnerability management requirements for Federal Civilian Executive Branch agencies. The directive reinforces prioritizing security updates based on risk to protect federal networks. [1]

Share

In short

CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog on November 6, 2026.
The vulnerability involves single-factor authentication in SonicWall SonicOS SSLVPN.
CISA catalog addition was based on evidence of active exploitation.
Binding Operational Directive 26-04 establishes remediation requirements for Federal Civilian Executive Branch agencies.

Sources

Every paragraph above points to the numbered items it rests on. Read the originals here.

[1]CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts, 3d ago (the report this story comes from)
[2]Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last TimeThe Hacker News, 3d ago
[3]CISA Adds WordPress Vulnerability to KEV Catalog After Upgrade-Window Attacksremio, 4d ago
[4]CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core VulnerabilityHackread, 3d ago
[5]CISA Warns of WordPress Core Vulnerability Enabling HacksRS Web Solutions, 3d ago

Background

[6]Next.js on Wikipedia
[7]Vulnerability on Wikipedia
[8]Vulnerability on Grokipedia

Our newsroom writes these reports with the help of software, from the 8 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.

Earlier reports of ours on the same people and subjects.

CISA adds WordPress Core race condition vulnerability to catalogThreat Intelligence, 6d ago
CISA adds four exploited security flaws to known vulnerabilities catalogThreat Intelligence, now
SonicWall patches exploited SonicOS vulnerability allowing VPN login bypassTop Stories, 2d ago
Updating WordPress Sites to Fix Active Vulnerability Can Still Trigger ExploitationTop Stories, 3d ago
SonicWall SMA 1000 Appliances Target of Critical Vulnerability Exploitation AttemptsTop Stories, 28d ago

More in Threat Intelligence

Get the day in one email

Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.

By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments

Loading

Join the conversation

Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.

Already on the list? Enter the same address and we will send a sign-in link.

By signing up you agree to our terms and privacy policy. Unsubscribe any time.