# SZB-4458e05e7c: SonicWall patches seven SonicOS flaws, including an SSL-VPN bypass exploited in attacks

SonicWall has released security updates fixing seven vulnerabilities in SonicOS firewalls. The item says one of them, an SSL-VPN authentication bypass, is being exploited in attacks.

- Type: Early warning
- Kind: Vulnerability
- Vendor: SonicWall
- Product: SonicOS
- Status: Reported, not confirmed
- Sources: 8 distinct
- First seen: 2026-11-08 05:08 UTC

> No statement or filing from SonicWall has reached cve.now yet. Every claim below is quoted from, and linked to, the source that made it.

Written by a model from the sources below. Verify against them.

## What to do

- Apply the SonicOS security updates from SonicWall now
- Review SSL-VPN logs for unexpected logins or authentication bypass activity
- Restrict SSL-VPN access to trusted networks until patched

## Timeline

- 2026-11-06 21:04 UTC: Made public by Mastodon
- 2026-11-08 05:08 UTC: First seen by cve.now

## Evidence (8 sources)

- 2026-11-06 · Social · [Mastodon](https://infosec.exchange/@infonewscyber/117571524363399025): “FAILLE CRITIQUE CVE-2026-19868 activement exploitée : utilisation d'une authentification à un seul facteur dans SonicWall SonicOS SSLVPN”
- 2026-11-06 · Social · [Mastodon](https://infosec.exchange/@ssvc/117571686095657062): “IMPORTANT: SonicWall PSIRT has investigated a report indicating potential exploitation of this vulnerability.”
- 2026-11-06 · Social · [Bluesky](https://bsky.app/profile/patchsonar.com/post/3mzoegjwn5j22): “Zero-day · Newly listed by CISA: SonicWall SonicOS SSLVPN”
- 2026-11-06 · Social · [Mastodon](https://infosec.exchange/@patchsonar/117571703121618888): “CISA lists this as actively exploited, so treat it as urgent.”
- 2026-11-07 · Press · [BleepingComputer on Bluesky](https://bsky.app/profile/bleepingcomputer.com/post/3mzolqntpah2x): “SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks.”
- 2026-11-07 · Social · [Mastodon](https://infosec.exchange/@security_crawler_carl/117573069257658675): “Patch SonicOS within 24 to 48 hours — that is not a suggestion, that is the final scene before the credits roll and your data walks out wearing a trench coat.”
- 2026-11-08 · Social · [Mastodon](https://infosec.exchange/@beyondmachines1/117581185466880591): “SonicWall has patched seven vulnerabilities in SonicOS, including an actively exploited flaw (CVE-2026-19868) that allows attackers to bypass SAML-based MFA on SSL VPNs.”
- 2026-11-08 · Social · [Mastodon](https://infosec.exchange/@beyondmachines1/117581421386388181): “SonicWall reports two vulnerabilities in its End-of-Life Global Management System (GMS), including a critical unauthenticated file read flaw (CVE-2026-109593).”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-4458e05e7c&body=https%3A%2F%2Fcve.now%2FSZB-4458e05e7c%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-4458e05e7c

### Has SonicWall confirmed it?

Mastodon, Mastodon and Bluesky report a possible compromise. None of the sources says it happened. No statement from SonicWall has reached cve.now yet.

Source: https://infosec.exchange/@infonewscyber/117571524363399025, https://infosec.exchange/@ssvc/117571686095657062, https://bsky.app/profile/patchsonar.com/post/3mzoegjwn5j22, https://infosec.exchange/@patchsonar/117571703121618888, https://bsky.app/profile/bleepingcomputer.com/post/3mzolqntpah2x, https://infosec.exchange/@security_crawler_carl/117573069257658675, https://infosec.exchange/@beyondmachines1/117581185466880591, https://infosec.exchange/@beyondmachines1/117581421386388181

### What should SonicWall users do?

Apply the SonicOS security updates from SonicWall now. Review SSL-VPN logs for unexpected logins or authentication bypass activity. Restrict SSL-VPN access to trusted networks until patched.

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-4458e05e7c
Site guide for agents: https://cve.now/llms.txt