CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SonicOS SSLVPN SAML Authentication Bypass and MFA Circumvention (CVE-2026-19868)
[Affected Scope] SonicWall firewall appliances running SonicOS 7.x and 6.5.x with SSLVPN service enabled.
[Impact] Attackers with valid credentials for alternate authentication methods can bypass SAML controls and enforced MFA to gain unauthorized network access.
[Mitigation] Immediately apply the latest firmware updates provided by SonicWall and audit SSLVPN access logs for suspicious activity.
Cisco ASA and FTD SSL VPN Remote Denial of Service Vulnerability (CVE-2026-76418)
[Affected Scope] Cisco ASA and FTD Software with Remote Access SSL VPN enabled and secondary authentication configured.
[Impact] Unauthenticated remote attackers can trigger an unexpected device reload, leading to a complete Denial of Service (DoS) of VPN services.
[Mitigation] Apply the latest security patches from Cisco immediately; review secondary authentication configurations if patching is delayed.
VeloCloud Orchestrator (VCO) Privilege Escalation and Internal Access Vulnerability (CVE-2026-114625)
[Affected Scope] On-premise deployments of VeloCloud Orchestrator (VCO).
[Impact] Authenticated users can escalate to 'superuser operator' privileges, leading to full system compromise and data breach.
[Mitigation] Apply official security patches immediately and restrict network access to the management interface.
ConnectWise ScreenConnect Client Remote Code Execution (RCE) and Privilege Escalation (CVE-2026-84869)
[Affected Scope] ConnectWise ScreenConnect client software (Servers are not impacted)
[Impact] Attackers can exploit active remote sessions to transfer and execute malicious files without host confirmation, leading to full system compromise.
[Mitigation] Immediately update all ScreenConnect clients to the latest patched version and enforce session consent policies.