CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SonicOS SSLVPN SAML Authentication Bypass and MFA Circumvention (CVE-2026-19868)
[Affected Scope] SonicWall firewall appliances running SonicOS 7.x and 6.5.x with SSLVPN service enabled.
[Impact] Attackers with valid credentials for alternate authentication methods can bypass SAML controls and enforced MFA to gain unauthorized network access.
[Mitigation] Immediately apply the latest firmware updates provided by SonicWall and audit SSLVPN access logs for suspicious activity.
SonicWall SonicOS Management Access Improper Access Control Vulnerability (CVE-2024-40766) Analysis and Mitigation Guide
[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions
[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)
[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall