SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA

SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor authentication checks. Tracked as CVE-2026-19868, the flaw carries a CVSS score of 7.1. The company has investigated a report indicating potential...

#Sicherheitslücke #Update

ARTICLEVIEW

SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA

VERWANDTEARTIKEL

The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call

CVE-2026-120839 - WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

CVE-2026-122041 - Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action

CVE-2026-119075 - Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout

CVE-2026-118066 - Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameter

CVE-2026-118267 - WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert