US CISA Adds SonicWall SSL VPN Flaw to KEV Catalog Due to Active Exploitation
US CISA added SonicWall CVE-2026-19868 to its KEV list after confirming active exploitation, requiring US federal agencies to patch within 14 days.
On November 6, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) updated its Known Exploited Vulnerabilities (KEV) catalog to include a vulnerability in SonicWall's SonicOS SSL VPN, identified as CVE-2026-19868. The agency stated it has evidence that this flaw, which involves issues with authentication mechanisms, is being actively exploited in the wild.
As part of the addition to the KEV list, CISA mandated that U.S. federal agencies complete patching or implement mitigation measures for this vulnerability within 14 days. On the same day, the Canadian Centre for Cyber Security also issued an advisory warning users and system administrators to apply security updates promptly.
According to SonicWall's official notice, affected products include Gen 7 and Gen 8 firewalls. The patched versions are SonicOS 7.3.4-7013 and 8.2.3-8015 respectively.