CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SonicOS SSLVPN SAML Authentication Bypass and MFA Circumvention (CVE-2026-19868)
[Affected Scope] SonicWall firewall appliances running SonicOS 7.x and 6.5.x with SSLVPN service enabled.
[Impact] Attackers with valid credentials for alternate authentication methods can bypass SAML controls and enforced MFA to gain unauthorized network access.
[Mitigation] Immediately apply the latest firmware updates provided by SonicWall and audit SSLVPN access logs for suspicious activity.
SonicWall SSLVPN Authentication Bypass and Remote Code Execution Vulnerability (CVE-2024-53704) Urgent Security Advisory
[Affected Scope] SonicWall SMA (Secure Mobile Access) appliances and firmware utilizing the SSLVPN authentication mechanism
[Impact] Remote unauthenticated attackers can completely bypass authentication, gain administrative access, and compromise the internal network
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the SSLVPN interface