CISA has confirmed that attackers are exploiting these 1 vulnerabilities. If you use any of the products below, check that the fixes are installed today.
SonicWall SonicOS SSLVPN (CVE-2026-19868)
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Remove software you do not use
Every program is something else to keep updated. Uninstall what you no longer need, especially old browser extensions.
Doing it once, properly
Cheaper is usually more expensive in the long run: a rushed or bargain setup is often done again from the start, and you pay twice, plus whatever the breach in between cost.
Sources
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.