Today, attackers are targeting vulnerabilities in SonicWall SSLVPN and multiple Apple products. Small businesses using these systems should review their security measures to protect against potential exploits.
SonicWall SonicOS SSLVPN (CVE-2026-19868)
SonicWall SonicOS SSLVPN allows attackers to bypass authentication controls, potentially enabling unauthorized access. Businesses should update their SonicWall SSLVPN systems to the latest version and review their security policies.
What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Apple Multiple Products (CVE-2024-27834)
Apple products like iOS, iPadOS, macOS, Safari, tvOS, and watchOS have an authentication vulnerability that could allow attackers to bypass security measures. Ensure all Apple devices are updated to the latest software version and review device access controls.
What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
WordPress WordPress Core (CVE-2026-119977)
WordPress core contains a race condition vulnerability that could allow attackers to execute code during upgrades. Businesses should update to the latest WordPress version and monitor for any unauthorized code execution.
What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Tip of the day: Check who can reach your devices
Routers, cameras and NAS boxes are often left open to the internet with their default passwords. Change them and switch off remote access you do not use.
Doing it once, properly
The lowest quote rarely stays the lowest. Work that skips the security basics tends to be redone from scratch later, and redoing it costs more than doing it properly once.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-19868 on the National Vulnerability Database
- CVE-2024-27834 on the National Vulnerability Database
- CVE-2026-119977 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.