security —

SonicWall SonicOS MFA Bypass Flaw Added to CISA KEV Catalog Amid Exploitation Reports

CISA has placed a high-severity flaw in SonicWall SonicOS into its Known Exploited Vulnerabilities (KEV) catalog.

SonicWall SonicOS MFA Bypass Flaw Added to CISA KEV Catalog Amid Exploitation Reports

This action followed indications that the vulnerability might have been leveraged in actual attacks.

The specific weakness is designated as CVE-2026-19868.

Its associated CVSS score is documented as 7.1 out of 7.5.

The nature of this vulnerability has been characterized as an authentication reinforcement issue.

This inclusion by CISA signals that the security community is actively monitoring the exploitation of this specific platform weakness.

Market participants relying on SonicWall SonicOS infrastructure must note this designation, as it indicates an elevated risk profile.

Earlier coverage

Reported by thehackernews.com.

securitycloud

Related coverage

Elsewhere in this edition