CISA has added a SonicWall SonicOS authentication vulnerability to its Known Exploited Vulnerabilities catalog, prompting immediate update guidance.
The flaw permits users with valid alternate credentials to bypass SAML and MFA controls in the SSL-VPN service.
The issue concerns the way SonicOS software handles user sign-in to the remote login service. According to the company, someone with login credentials via an alternative method could bypass additional security measures and multi-step authentication.
The reaction of the company and the authorities
SonicWall said it was investigating reports of potential exploits and urged its customers to install the patches immediately. The U.S. Cybersecurity and Infrastructure Security Agency added the issue to a public list of vulnerabilities being actively exploited in attacks.
United States government agencies were advised to implement the necessary fixes to their systems by November 20, 2026.
Additional fixes for other security vulnerabilities
In addition to this issue, the company recently patched other security vulnerabilities found in its systems. These include issues in the management interface regarding communication rules and checking active connections, as well as a vulnerability in remote login services that could be exploited by unknown parties.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
New update fixes serious security flaw in Microsoft Paint
↗
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)