{"metadata": {"vulnerability": "CVE-2026-19868", "count": 175, "kinds": {"milestone": 8, "sighting": 136, "kev": 11, "other": 20}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0471", "record": "NCSC-2026-0471", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-14T11:22:12.231Z", "date_only": false, "value": "2026-08-14T11:22:12.231Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-19868", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19868", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "evidence.0.details.date_added", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1483", "record": "CERTFR-2026-AVI-1483", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19868", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19868", "record": "FKIE_CVE-2026-19868", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "status.status_updated_at", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19868", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2026-19868 added to CISA KEV"}, {"timestamp": "2026-11-06T14:00:51Z", "date_only": false, "value": "2026-11-06T14:00:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-1133", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "4c7885d4-5f94-4544-8dea-674efa638155", "url": "https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-1133"}, {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T19:03:00.616Z", "date_only": false, "value": "2026-11-06T19:03:00.616Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T19:03:00.616Z", "date_only": false, "value": "2026-11-06T19:03:00.616Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T19:14:54.727Z", "date_only": false, "value": "2026-11-06T19:14:54.727981Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117571092099300158", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "b4a92e22-b58c-46c2-954b-023b4b0956d4", "content": "CVE-2026-19868  An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).\nhttps://www.cve.org/CVERecord?id=CVE-2026-19868https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014#SonicWall #SonicOS#CVE_2026_19868#bot", "url": "https://infosec.exchange/users/cve/statuses/117571092099300158"}, {"timestamp": "2026-11-06T19:17:48Z", "date_only": false, "value": "2026-11-06T19:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQ8W-J7H6-7Q9W", "record": "GHSA-MQ8W-J7H6-7Q9W", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-06T19:17:48.437Z", "date_only": false, "value": "2026-11-06T19:17:48.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19868", "record": "FKIE_CVE-2026-19868", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T20:13:00Z", "date_only": false, "value": "2026-11-06T20:13:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "65a74aa6-21bf-4196-b99a-7b7b7038ea20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T20:13:00Z", "date_only": false, "value": "2026-11-06T20:13:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-19868", "field": "evidence.0.details.added_date", "uuid": "65a74aa6-21bf-4196-b99a-7b7b7038ea20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T20:13:00Z", "date_only": false, "value": "2026-11-06T20:13:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-19868", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "65a74aa6-21bf-4196-b99a-7b7b7038ea20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T20:13:00Z", "date_only": false, "value": "2026-11-06T20:13:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-19868", "field": "status.status_updated_at", "uuid": "65a74aa6-21bf-4196-b99a-7b7b7038ea20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T20:52:38.377Z", "date_only": false, "value": "2026-11-06T20:52:38.377868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malice.ai/post/3mzob7fc7nuxs", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "f12fc7a0-bd6e-4728-bff9-ae74c3d4b5e8", "content": "SonicWall's November 6 advisory covers seven CVEs in SonicOS and says it investigated a report of potential exploitation of CVE-2026-19868. CISA added that flaw to its KEV catalog.", "url": "https://bsky.app/profile/malice.ai/post/3mzob7fc7nuxs"}, {"timestamp": "2026-11-06T20:59:06.709Z", "date_only": false, "value": "2026-11-06T20:59:06.709658Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/aotkmen4bfhte", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0e0a60d4-dd68-4eb9-a8e9-37d5e5cfdd5d", "content": "\ud83d\uded1 CVE-2026-19868\nCVSS: unavailable / KEV \u2705\nTL;DR: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML\u2026\nhttps://cvesentinel.com/report/CVE-2026-19868\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/aotkmen4bfhte"}, {"timestamp": "2026-11-06T21:00:01Z", "date_only": false, "value": "2026-11-06T21:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T21:00:02.241Z", "date_only": false, "value": "2026-11-06T21:00:02.241583Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7cb90d8e-44e6-4dab-b4e4-5ef5f1741282", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-06T21:04:50.153Z", "date_only": false, "value": "2026-11-06T21:04:50.153943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzobva5amf2h", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "573fde0f-8654-4d10-a16f-1e46e72539d7", "content": "\u26a0\ufe0f FAILLE CRITIQUE\n\nCVE-2026-19868 activement exploit\u00e9e : utilisation d'une authentification \u00e0 un seul facteur dans SonicWall SonicOS SSLVPN\n\n\ud83d\udd17 https://infonewscyber.fr/info/cve-2026-19868-activement-exploitee-utilisation-d-une-authentification-7340dbad9c1e77ec\n#SonicWall #ZeroDay #Cybers\u00e9curit\u00e9", "url": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzobva5amf2h"}, {"timestamp": "2026-11-06T21:06:04.140Z", "date_only": false, "value": "2026-11-06T21:06:04.140448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzr6sln3qgl3", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "40d3e0af-90f8-45a5-83b7-1c8ba47bcaaa", "content": "CVE-2026-19868: SonicWall SonicOS SSLVPN Use Of Single-Factor Authentication Vulnerability\nhttps://cyber.eventmonitor.net/incident/EM-20261106-XD0H/cve-2026-19868-sonicwall-sonicos-sslvpn-use-of-single-factor-authentication/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzr6sln3qgl3"}, {"timestamp": "2026-11-06T21:11:22.718Z", "date_only": false, "value": "2026-11-06T21:11:22.718072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chuiho.net/post/3mzocax7rdp2h", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "ba1dc9e4-ad32-4a9d-bc8a-0150be43d5bc", "content": "\ud83d\udea8\u901f\u5831\uff3b\u8b66\u6212\uff3dCVE-2026-19868 SonicWall SSLVPN\u3001\u60aa\u7528\u3092 CISA \u304c\u8b66\u544a\nSonicWall SonicOS \u306e SSLVPN \u306b\u3001SAML \u8a8d\u8a3c\u3068 MFA \u3092\u56de\u907f\u3055\u308c\u3046\u308b\u6b20\u9665\uff08CVE-2026-19868\uff09\u3002CISA \u304c KEV \u306b\u8ffd\u52a0\u3002SonicOS 7.3.3-7015 \u4ee5\u524d\u30fb8.2.2-8015 \u4ee5\u524d\u304c\u5bfe\u8c61\u3002\nhttps://chuiho.net/posts/sonicwall-cve-2026-19868-sslvpn-kev/ #SonicWall #SonicOS", "url": "https://bsky.app/profile/chuiho.net/post/3mzocax7rdp2h"}, {"timestamp": "2026-11-06T21:28:40.720Z", "date_only": false, "value": "2026-11-06T21:28:40.720489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mzod7vdgvz24", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "06e9529c-8c2e-4cc1-a63d-05aaafae967b", "content": "\u26a0\ufe0f Exploited in the wild: CVE-2026-19868\nSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\nAdded to CISA KEV \u00b7 High 7.5\nhttps://ax-news.com/cve/CVE-2026-19868\n#CVE #KEV #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mzod7vdgvz24"}, {"timestamp": "2026-11-06T21:31:27Z", "date_only": false, "value": "2026-11-06T21:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQ8W-J7H6-7Q9W", "record": "GHSA-MQ8W-J7H6-7Q9W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T21:31:27Z", "date_only": false, "value": "2026-11-06T21:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQ8W-J7H6-7Q9W", "record": "GHSA-MQ8W-J7H6-7Q9W", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T21:50:17.394Z", "date_only": false, "value": "2026-11-06T21:50:17.394045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patchsonar.com/post/3mzoegjwn5j22", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0404ad57-90b9-4652-be17-d68802317801", "content": "Zero-day \u00b7 Newly listed by CISA: SonicWall SonicOS SSLVPN\nSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\n\nWhat to do: Install the vendor's security update. If there isn't one yet, apply the vendor's\u2026\n\nhttps://patchsonar.com/cve/CVE-2026-19868 #ZeroDay #InfoSec", "url": "https://bsky.app/profile/patchsonar.com/post/3mzoegjwn5j22"}, {"timestamp": "2026-11-06T21:55:06.489Z", "date_only": false, "value": "2026-11-06T21:55:06.489175Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mzoep5plta2s", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "30f643c8-2a16-4a51-be0a-a2eb96ec1e6e", "content": "\u3010\u60aa\u7528\u78ba\u8a8d\u3011CVE-2026-19868\nSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\nSonicWall SonicOS SSLVPN\nCISA \u8ffd\u52a0 11/6\u30fb\u5bfe\u5fdc\u671f\u9650 11/20\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19868\n#\u8106\u5f31\u6027 #KEV #SonicWall", "url": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mzoep5plta2s"}, {"timestamp": "2026-11-06T22:15:04.200Z", "date_only": false, "value": "2026-11-06T22:15:04.200389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mzofstp24m2y", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0b95b946-7d56-48b7-95e8-78d841b1e82c", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nSonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\nCVE-2026-19868 \u00b7 patch by 2026-11-20\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-19868\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mzofstp24m2y"}, {"timestamp": "2026-11-06T22:50:23.830Z", "date_only": false, "value": "2026-11-06T22:50:23.830145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzohrzdg2t2h", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "72a18bb2-cd86-4858-9b0d-787bf89bd255", "content": "Attackers exploit the SonicWall SonicOS SSLVPN flaw CVE-2026-19868 in the wild. Update Gen7 and Gen8 firewalls now to patch CVE-2026-107155 and 6 bugs.\n\n#SonicWall #SonicOS #SSLVPN #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzohrzdg2t2h"}, {"timestamp": "2026-11-06T23:09:41.906Z", "date_only": false, "value": "2026-11-06T23:09:41.906877Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mzoiujltkr2q", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e3bbb675-a14f-4dc6-85c2-2bc59828f8f6", "content": "SonicWall SonicOS Affected By Multiple Vulnerabilities - CVE-2026-77708, CVE-2026-77709, CVE-2026-82308, CVE-2026-107154, CVE-2026-107155, CVE-2026-19703, CVE-2026-19868", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mzoiujltkr2q"}, {"timestamp": "2026-11-07T00:00:28.785Z", "date_only": false, "value": "2026-11-07T00:00:28.785340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mzolpcqkt32k", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "5cd1e020-f8b6-44bf-a8ab-e1c0eef3bcf8", "content": "Win11 26H1 28020.3445 adds inline Search actions; builds 26340.9882 (Hello audit) & 29704.1000 (AMD audio fix); SonicWall SSLVPN CVE-2026-19868 exploited; Entra ID app secrets abused. Member diver photo. +25 more stories, 6 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3mzolpcqkt32k"}, {"timestamp": "2026-11-07T00:01:50.181Z", "date_only": false, "value": "2026-11-07T00:01:50.181079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mzolrr6fud24", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9b76aa79-d713-4bca-95c3-c0d349e4bdf5", "content": "\ud83d\udd34 EXPLOITED\n\nCVE-2026-19868: A SonicWall SonicOS SSLVPN flaw may let a user with valid credentials for another login method bypass SAML controls and SAML-enforced MFA. Listed in CISA KEV. Apply SonicWall mitigations by Nov 20, the KEV due date.", "url": "https://bsky.app/profile/suriq.io/post/3mzolrr6fud24"}, {"timestamp": "2026-11-07T00:15:05.969Z", "date_only": false, "value": "2026-11-07T00:15:05.969712Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzomji3bnn2l", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "de6853a1-cdee-4ab9-8146-002419bb5583", "content": "CVE-2026-19868 added to CISA KEV on 2026-11-06.\n\nAn authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method.\n\nDon\u2019t miss this KEV addition.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-19868/\n\n#fcvulns #KEV", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzomji3bnn2l"}, {"timestamp": "2026-11-07T00:18:40.965Z", "date_only": false, "value": "2026-11-07T00:18:40.965477Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117452577898355339/statuses/117571336319567183", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7de16633-6e7c-42ca-b18f-8526be8aacf9", "content": "Added to CISA's Known Exploited Vulnerabilities catalog: CVE-2026-19868\nSonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityUS federal agencies must remediate by 2026-11-20.\nSonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Succes\u2026\nhttps://overflo.ws/cve/CVE-2026-19868\n#CVE #KEV #CISA #CVE_2026_19868 #SonicWall #SonicOSSSLVPN", "url": "https://infosec.exchange/ap/users/117452577898355339/statuses/117571336319567183"}, {"timestamp": "2026-11-07T00:18:47.889Z", "date_only": false, "value": "2026-11-07T00:18:47.889450Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117571686095657062", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "c5a1bbfa-2064-4334-9a5d-4b9bf308ff22", "content": "On the other hand, SonicWall's security advisory doesn't explicitly say if there's confirmed zero-day exploitation of CVE-2026-19868 - SSLVPN Authentication Enforcement Vulnerability via Alternate Authentication Methods\n\nIMPORTANT: SonicWall PSIRT has investigated a report indicating potential exploitation of this vulnerability. Customers are strongly urged to upgrade to the latest release as soon as possible to mitigate the associated risks.\nI would take CISA, an official and (mostly) impartial government agency at their word if they add it to their KEV Catalog, because they might have more evidence that it's being exploited in the wild... whereas a software vendor is less willing to admit it and open themselves to civil liability?\nhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014\n#sonicwall #zeroday #cve #kev #cisa", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117571686095657062"}, {"timestamp": "2026-11-07T00:19:32.064Z", "date_only": false, "value": "2026-11-07T00:19:32.064686Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117529250753467560/statuses/117571524363399025", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "efd753b7-a1a4-463e-8c99-2ab3f90bc31a", "content": "\u26a0\ufe0f FAILLE CRITIQUE\nCVE-2026-19868 activement exploit\u00e9e : utilisation d'une authentification \u00e0 un seul facteur dans SonicWall SonicOS SSLVPN\n\ud83d\udd17 https://infonewscyber.fr/info/cve-2026-19868-activement-exploitee-utilisation-d-une-authentification-7340dbad9c1e77ec#SonicWall #ZeroDay #CISA #infosec #cybersecurity #Cybers\u00e9curit\u00e9", "url": "https://infosec.exchange/ap/users/117529250753467560/statuses/117571524363399025"}, {"timestamp": "2026-11-07T00:19:46.737Z", "date_only": false, "value": "2026-11-07T00:19:46.737395Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117509315927375519/statuses/117571618030752966", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "1a945b5c-ec60-49c9-aa39-cab4ee4528e6", "content": "\u26a0\ufe0f Exploited in the wild: CVE-2026-19868SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilityAdded to CISA KEV \u00b7 High 7.5https://ax-news.com/cve/CVE-2026-19868#CVE #KEV #infosec", "url": "https://infosec.exchange/ap/users/117509315927375519/statuses/117571618030752966"}, {"timestamp": "2026-11-07T00:20:11.179Z", "date_only": false, "value": "2026-11-07T00:20:11.179836Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117524993192219894/statuses/117571703121618888", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9e755356-34aa-4ed1-9205-2105d96f9b48", "content": "Zero-day \u00b7 Newly listed by CISA: SonicWall SonicOS SSLVPNSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\nWhat to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.\nhttps://patchsonar.com/cve/CVE-2026-19868 #ZeroDay #InfoSec", "url": "https://infosec.exchange/ap/users/117524993192219894/statuses/117571703121618888"}, {"timestamp": "2026-11-07T00:33:55.809Z", "date_only": false, "value": "2026-11-07T00:33:55.809150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mzonkzrhmc2l", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "3f1faa3d-f7cd-476f-9ce2-9d3ea2dd28d1", "content": "Multi-factor, they said. Cute. SonicWall SSL-VPN CVE-2026-19868: valid password on the alternate auth path walks past SAML MFA. Exploited. CISA stuck it on KEV. Federal deadline Nov 20. Patch Gen7/8 or enjoy the side door. @bleepingcomputer.com", "url": "https://bsky.app/profile/alienrick.xyz/post/3mzonkzrhmc2l"}, {"timestamp": "2026-11-07T00:41:39.689Z", "date_only": false, "value": "2026-11-07T00:41:39.689296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mzonyxfle22n", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "f39a07b9-d22e-4e44-9c06-9475f9918960", "content": "\ud83d\udd34 EXPLOITED\n\nSonicWall CVE-2026-19868 lets a password from another login method skip SAML single sign-on and its MFA on SSL VPN. It is now exploited.\n\nAffects SonicOS firewalls using SAML for VPN logins.\n\nFix: 7.3.4-7013 or 8.2.3-8015.", "url": "https://bsky.app/profile/suriq.io/post/3mzonyxfle22n"}, {"timestamp": "2026-11-07T01:06:30.911Z", "date_only": false, "value": "2026-11-07T01:06:30.911447Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mzopffux5o2j", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d4d1cd30-551f-4766-9a05-352e79d69fae", "content": "SonicWall fixed a SonicOS SSL-VPN flaw (CVE-2026-19868) that can bypass SAML auth, possibly including MFA. CISA added it to KEV. Fixed in Gen7 7.3.4-7013 and Gen8 8.2.3-8015, no workarounds, per BleepingComputer. bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mzopffux5o2j"}, {"timestamp": "2026-11-07T01:21:59.447Z", "date_only": false, "value": "2026-11-07T01:21:59.447614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzoqb3m5m72z", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "77d81874-307f-4c00-84f8-9b81abf890d8", "content": "\ud83e\udd16 SonicWall CVE-2026-19868 (CVSS 7.1): SSL-VPN auth bypass in SonicOS, valid alt creds skip SAML/MFA. Exploited in the wild, in CISA KEV. Fixed 7.3.4-7013 / 8.2.3-8015.\n\nhttps://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzoqb3m5m72z"}, {"timestamp": "2026-11-07T01:59:11Z", "date_only": false, "value": "2026-11-07T01:59:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/11/06/sonicwall-warns-of-new-sslvpn.html", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e6e46259-8587-4313-aed5-c7cb506e4594", "content": "SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks\n\nSonicWall has patched seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN flaw that lets attackers with credentials for an alternate authentication method bypass SAML controls, potentially including SAML-enforced MFA. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch by November 20; the release also fixes two management-interface flaws rated 8.8. No workarounds are available.", "url": "https://threatintel.cc/2026/11/06/sonicwall-warns-of-new-sslvpn.html"}, {"timestamp": "2026-11-07T02:59:47.498Z", "date_only": false, "value": "2026-11-07T02:59:47.498304Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117572920091692268", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "028551ee-1495-44d6-bc99-fee4a7c3a1b8", "content": "SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks\nSonicWall has patched seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN flaw that lets attackers with credentials for an alternate authentication method bypass SAML controls, potentially including SAML-enforced MFA. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch by November 20; the release also fixes two management-interface flaws rated 8.8. No workarounds are available. https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/", "url": "https://infosec.exchange/users/edwardk/statuses/117572920091692268"}, {"timestamp": "2026-11-07T02:59:48.450Z", "date_only": false, "value": "2026-11-07T02:59:48.450881Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mzovpyo6cn2g", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "398d54df-187f-47fe-9f01-7a76f5fe5ea2", "content": "SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks\n\nSonicWall has patched seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN flaw that lets attackers with credentials for an alternate authentica... https://threatintel.cc/2026/11/06/sonicwall-warns-of-new-sslvpn.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mzovpyo6cn2g"}, {"timestamp": "2026-11-07T03:16:12.844Z", "date_only": false, "value": "2026-11-07T03:16:12.844036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackurity.ai/post/3mzoso6feaqyq", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "66273064-e3a0-41b7-9a9d-0c61b63e7da1", "content": "CISA lists SonicWall SonicOS SSLVPN flaw CVE-2026-19868 as exploited: a SAML bypass that can also defeat MFA. Apply SonicWall's mitigation. Stackurity does not cover appliance firmware.\n\nstackurity.ai/blog/sonicwall-sonicos-...", "url": "https://bsky.app/profile/stackurity.ai/post/3mzoso6feaqyq"}, {"timestamp": "2026-11-07T03:21:52.494Z", "date_only": false, "value": "2026-11-07T03:21:52.494936Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mzowxgwb4z2m", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e0051fe9-27eb-4c38-bab3-2a8e286905cf", "content": "SonicWall Fixes SSLVPN Flaw That Can Bypass SAML\u00a0MFA\n\nSonicWall released fixes for CVE-2026-19868, an exploited SonicOS SSLVPN flaw that can bypass SAML authentication and MFA on affected Gen 7 and Gen 8 firewalls.", "url": "https://bsky.app/profile/abijita.bsky.social/post/3mzowxgwb4z2m"}, {"timestamp": "2026-11-07T03:25:06.274Z", "date_only": false, "value": "2026-11-07T03:25:06.274800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xploitdigest-kev.bsky.social/post/3mzox5a7qnb2o", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "c3ae0a05-f9e6-47f4-b9e8-66eed2d01c1e", "content": "Do you run SonicWall SonicOS SSLVPN?\n\nCISA lists CVE-2026-19868 as exploited (added 6 Nov 2026).\n\nCan it reach you? Over a network, with no login and no click. CVSS 7.5.\n\nPlain-English breakdown:\nxploitdigest.com/kev/CVE-2026-19868\n\n#SonicWall #CyberSecurity #InfoSec #Vulnerability #CVE #KEV", "url": "https://bsky.app/profile/xploitdigest-kev.bsky.social/post/3mzox5a7qnb2o"}, {"timestamp": "2026-11-07T04:01:11.825Z", "date_only": false, "value": "2026-11-07T04:01:11.825060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mzoz5rldxx25", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7d53037b-4e9f-4227-91dd-8fff0c38ae3f", "content": "~Cisa~\nCISA added CVE-2026-19868, a SonicWall SonicOS SSLVPN single-factor authentication flaw, to its KEV catalog following active exploitation, requiring federal agencies...\n-\nIOCs: CVE-2026-19868\n-\n#AuthenticationBypass #ExploitedVulnerability #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/cyfar.ca/post/3mzoz5rldxx25"}, {"timestamp": "2026-11-07T04:55:51.743Z", "date_only": false, "value": "2026-11-07T04:55:51.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-19868", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:55:51.743Z", "date_only": false, "value": "2026-11-07T04:55:51.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19868", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:10:27.178Z", "date_only": false, "value": "2026-11-07T05:10:27.178384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzp4zlxmer2d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "45c9bba2-b5df-4671-a9b0-5fced1a2d59d", "content": "Critical Threat Intelligence: SonicWall SonicOS SSLVPN MFA Bypass CVE-2026-19868 Actively Exploited in the Wild +\u00a0Video\n\nIntroduction: The discovery and active exploitation of CVE-2026-19868\u2014a high-severity authentication enforcement flaw impacting SonicWall SonicOS SSLVPN\u2014highlights critical gaps\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzp4zlxmer2d"}, {"timestamp": "2026-11-07T05:38:49.313Z", "date_only": false, "value": "2026-11-07T05:38:49.313420Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mzp6mdmxxb2v", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "507ca709-071a-496a-9c93-ec07a8e9c872", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19868: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate auth\u2026\nCVSS 7.5 \u00b7 CISA KEV \u00b7 0day\nhttps://vulnsea.com/cve/CVE-2026-19868\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mzp6mdmxxb2v"}, {"timestamp": "2026-11-07T06:01:22.841Z", "date_only": false, "value": "2026-11-07T06:01:22.841706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mzp7ul5axorr", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "a9ddb55e-ff36-4af8-bb0b-1b39b3b03f06", "content": "IBM API Connect cascade + active SonicWall & OpenSSH exploits\n\n\u2022 API Connect CVSS 9.6 wildcard injection flaw\n\u2022 SonicWall MFA bypass CVE-2026-19868 in KEV\n\u2022 OpenSSH SSHole exploited within hours\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #ZeroDayAlert #OpenSSH", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3mzp7ul5axorr"}, {"timestamp": "2026-11-07T06:30:29.995Z", "date_only": false, "value": "2026-11-07T06:30:29.995044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mzpbipzwx42r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "810ddfba-07aa-469f-9342-69c06972aa4e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-19868: \u26a0\ufe0f CVE-2026-19868: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-19868-an-authentication-enforcement-vulnerability-in-sonicos", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mzpbipzwx42r"}, {"timestamp": "2026-11-07T07:04:07.745Z", "date_only": false, "value": "2026-11-07T07:04:07.745454Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzpdeuthi52h", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "1cdc6e05-1c31-49f0-aa2d-e32436a581e1", "content": "\u2600\ufe0f Le point cyber du 07/11\n65 infos en 24 h dont 1 critiques\n\n\u26a0\ufe0f CVE-2026-19868 activement exploit\u00e9e : utilisation\u2026\n\ud83c\uddeb\ud83c\uddf7\ud83d\udc80 Ligne Roset revendiqu\u00e9e par le groupe akira\n\ud83c\uddeb\ud83c\uddf7\ud83d\udd13 CyberAttaque du Secours Islamique France : les\u2026\n\n\ud83d\udd17 https://infonewscyber.fr\n#Cybers\u00e9curit\u00e9", "url": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzpdeuthi52h"}, {"timestamp": "2026-11-07T07:43:49.625Z", "date_only": false, "value": "2026-11-07T07:43:49.625244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mzpflufhc22d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "1e5cdd7f-0e4e-457d-853a-91bfbbdf5817", "content": "Top 3 CVE for last 7 days:\nCVE-2026-98432: 222 interactions\nCVE-2026-83844: 122 interactions\nCVE-2026-109518: 50 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-83844: 59 interactions\nCVE-2026-123158: 42 interactions\nCVE-2026-19868: 15 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mzpflufhc22d"}, {"timestamp": "2026-11-07T08:17:49.227Z", "date_only": false, "value": "2026-11-07T08:17:49.227986Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mzphinqi5q2b", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "048d39b7-8f31-47b7-a170-ce7eafe62de7", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 06/11) \u00b7 1\n\u2022 SonicWall SonicOS SSLVPN CVE-2026-19868, CVSS 7.5", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mzphinqi5q2b"}, {"timestamp": "2026-11-07T08:28:38.095Z", "date_only": false, "value": "2026-11-07T08:28:38.095014Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mzpi3tyyjc2p", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "ff05e9ff-6987-48db-a29e-2b6b6ddf19ef", "content": "SonicWall SonicOS: Angreifer umgehen MFA im SSLVPN\n\n Die L\u00fccke CVE-2026-19868 ist Teil eines Sicherheitshinweises zu insgesamt sieben Schwachstellen. \n\nshorturl.at/hQeD8\n\n#schwachstellen #sicherheitsl\u00fccken #pach", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mzpi3tyyjc2p"}, {"timestamp": "2026-11-07T08:29:35.148Z", "date_only": false, "value": "2026-11-07T08:29:35.148423Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/runbooklab.bsky.social/post/3mzpi5n22e326", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0cef4955-a700-4f34-b30a-68e665632b6c", "content": "SonicWall SSL-VPN CVE-2026-19868, in CISA KEV since 6 Nov: valid alternate credentials may bypass SAML and its MFA. Only where SAML is used for SSL-VPN logins.\nDo this: upgrade Gen 7 to 7.3.4-7013+, Gen 8 to 8.2.3-8015+.\nSource: SNWLID-2026-0014\nrunbooklabhq.com/news/sonicwa...", "url": "https://bsky.app/profile/runbooklab.bsky.social/post/3mzpi5n22e326"}, {"timestamp": "2026-11-07T09:16:23Z", "date_only": false, "value": "2026-11-07T09:16:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "da50a599-a778-4166-aaf2-b754bf764e1f", "content": "CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.\n\nThe post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek.", "url": "https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/"}, {"timestamp": "2026-11-07T09:42:27.566Z", "date_only": false, "value": "2026-11-07T09:42:27.566667Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-0b230632-98389e75fa6bb35f", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7cdcd2f5-abf2-4b3f-8917-d0b31f438e5c", "content": "U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-19868 is an authentication bypass vulnerability affecting the SSL VPN service in SonicWall SonicOS. [\u2026]U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog", "url": "https://poliverso.org/objects/0477a01e-0b230632-98389e75fa6bb35f"}, {"timestamp": "2026-11-07T09:42:39.256Z", "date_only": false, "value": "2026-11-07T09:42:39.256906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mzpmaaoyuee2", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e4fe0afc-c1e2-4abd-b047-567ab93a64df", "content": "U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mzpmaaoyuee2"}, {"timestamp": "2026-11-07T10:55:25.913Z", "date_only": false, "value": "2026-11-07T10:55:25.913647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/24hhotnewsai.bsky.social/post/3mzpqchvbh22w", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fd3738b3-2a78-453d-b9cd-b265cdccd448", "content": "\ud83d\udd25 L\u1ed7 h\u1ed5ng SSLVPN c\u1ee7a SonicWall CVE-2026-19868 \u0111ang b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c: C\u1ea7n v\u00e1 ngay l\u1eadp t\u1ee9c\n#NewsBrief #VNNews", "url": "https://bsky.app/profile/24hhotnewsai.bsky.social/post/3mzpqchvbh22w"}, {"timestamp": "2026-11-07T12:40:09Z", "date_only": false, "value": "2026-11-07T12:40:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/56240", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "49095d75-6e8f-4da7-9d5d-42123d0992a3", "content": "SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins\nhttps://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/\n\nCVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.\nThe post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins (https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/56240"}, {"timestamp": "2026-11-07T13:00:17.707Z", "date_only": false, "value": "2026-11-07T13:00:17.707512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3mzpxbqhpkm27", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "cfa47f27-259d-4eab-b9b3-0b13ca8dce12", "content": "Exploited now: CVE-2026-19868 in SonicWall SonicOS SSLVPN. Added to CISA KEV Nov 6, 2026. CVSS 7.5. SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability\n\n#cybersecurity #infosec\n\ninfosecsignals.com/cves/CVE-2026-19868\n#healthcare #KEV #vulnerabilitymanagement", "url": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3mzpxbqhpkm27"}, {"timestamp": "2026-11-07T14:03:02.622Z", "date_only": false, "value": "2026-11-07T14:03:02.622758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzq2rxlbw62k", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "622dfcb7-9e9b-48af-a677-ffda41fcafbe", "content": "\ud83e\udd16 CVE-2026-19868 (CVSS 7.5): SonicOS SSLVPN auth bypass \u2014 credentials valid for an alternate method skip SAML checks, incl. SAML-enforced MFA. Exploited in the wild, CISA KEV Nov 6. 1 of 7 flaws patched.\nhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzq2rxlbw62k"}, {"timestamp": "2026-11-07T14:13:54.811Z", "date_only": false, "value": "2026-11-07T14:13:54.811418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ifynxstudio.bsky.social/post/3mzq3ff6rqp2c", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "260b3c47-273d-4d38-a21b-85599955f961", "content": "CISA KEV confirms SonicOS CVE-2026-19868. With SAML SSLVPN enabled, alternate valid credentials can bypass SAML/MFA. Verified fixed builds and checklist:\nhttps://ifynx.com/blog/sonicwall-vulnerability-cve-2026-19868-sslvpn-saml-mfa-bypass-patch-gulf-egypt/", "url": "https://bsky.app/profile/ifynxstudio.bsky.social/post/3mzq3ff6rqp2c"}, {"timestamp": "2026-11-07T14:55:28.990Z", "date_only": false, "value": "2026-11-07T14:55:28.990303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzq5ppksxc2r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "930e9873-28a6-42be-a3f3-6e530a843a00", "content": "Mitigating SonicWall SonicOS SSLVPN Authentication Enforcement Flaw (CVE-2026-19868) +\u00a0Video\n\nIntroduction: The discovery and active exploitation of CVE-2026-19868 in SonicWall SonicOS SSLVPN service highlight critical weaknesses in modern multi-factor authentication (MFA) enforcement mechanisms.\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzq5ppksxc2r"}, {"timestamp": "2026-11-07T17:27:18.094Z", "date_only": false, "value": "2026-11-07T17:27:18.094446Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mzqg75yqeg2j", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "eb63fb71-c159-4774-bad1-df25256a3b67", "content": "U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog\n\nThis article frames CVE-2026-19868 purely as an MFA bypass risk stemming from credential existence, yet it underplays the inherent architectural weakness if *any*\u2026\n\nvia Security Affairs (Pierluigi Paganini)", "url": "https://bsky.app/profile/arc-codex.com/post/3mzqg75yqeg2j"}, {"timestamp": "2026-11-07T17:39:08.180Z", "date_only": false, "value": "2026-11-07T17:39:08.180527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mzqgudzpej24", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "92d9db35-1c64-45a2-8905-8ba5cc698dfb", "content": "SonicWall SonicOS\u3067SAML\u8a8d\u8a3c\u3092\u8fc2\u56de\u3057\u3001VPN\u30ed\u30b0\u30a4\u30f3\u3092\u5f31\u4f53\u5316\u3055\u305b\u308b\u8106\u5f31\u6027(CVE-2026-19868)\u304c\u4fee\u6b63\u3055\u308c\u305f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mzqgudzpej24"}, {"timestamp": "2026-11-07T18:10:56.170Z", "date_only": false, "value": "2026-11-07T18:10:56.170899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gridwatchsignal.bsky.social/post/3mzqimpodcc2t", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "92f9824b-e677-4cf7-b600-96f14707ad49", "content": "New on CISA's KEV list (Nov 6): SonicWall SonicOS SSLVPN CVE-2026-19868.\n\nValid credentials for another auth method may bypass SAML controls, including SAML-enforced MFA. Federal deadline: Fri, Nov 20.\n\nGuidance: SonicWall advisory SNWLID-2026-0014.", "url": "https://bsky.app/profile/gridwatchsignal.bsky.social/post/3mzqimpodcc2t"}, {"timestamp": "2026-11-07T19:44:04Z", "date_only": false, "value": "2026-11-07T19:44:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3790", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e35f3b1a-4c55-4a0e-a191-f72794b4798b", "content": "\ud83d\udd34 U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog.\n\nCVE-2026-19868 is an authentication bypass vulnerability affecting the SSL VPN service in SonicWall SonicOS.", "url": "https://t.me/pphm_HackerNews/3790", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T21:00:02Z", "date_only": false, "value": "2026-11-07T21:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-19868", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "65a74aa6-21bf-4196-b99a-7b7b7038ea20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-07T21:00:40.944Z", "date_only": false, "value": "2026-11-07T21:00:40.944870Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/65a74aa6-21bf-4196-b99a-7b7b7038ea20", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "5ce25ccf-1b1e-4cec-b69d-e1830c839f2e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/65a74aa6-21bf-4196-b99a-7b7b7038ea20", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T21:14:22.722Z", "date_only": false, "value": "2026-11-07T21:14:22.722766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3mzqsvaanxt2u", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "df6aee94-1ee4-4c81-a84c-50a78ba49d2d", "content": "\u26a0\ufe0f Exploited now: CISA added CVE-2026-19868 (SonicWall SonicOS SSLVPN, CVSS 7.5) to its Known Exploited Vulnerabilities list. An authentication enforcement vulnerability in SonicOS SSLVPN\u2026 Public exploit code reported. #CVE #KEV\n\nthreatroundup.com/cve/cve-2026...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3mzqsvaanxt2u"}, {"timestamp": "2026-11-08T00:00:31Z", "date_only": false, "value": "2026-11-08T00:00:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/45322", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "81b9b665-fe5e-42ad-a4ea-e880bc1c5db7", "content": "SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins\n\nCVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.\nThe post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek.\nhttps://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/", "url": "https://t.me/VulnerabilityNews/45322"}, {"timestamp": "2026-11-08T00:22:03.699Z", "date_only": false, "value": "2026-11-08T00:22:03.699406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzr5ettqzd2d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e7089548-0282-42c6-b294-7654be71645b", "content": "\ud83e\udd16 CVE-2026-19868: SonicOS SSL-VPN SAML/MFA bypass with valid alternate creds, exploited in the wild (CISA KEV). Fixed in 7.3.4-7013 / 8.2.3-8015.\nhttps://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzr5ettqzd2d"}, {"timestamp": "2026-11-08T01:46:08.968Z", "date_only": false, "value": "2026-11-08T01:46:08.968139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzrc37ha6x2d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "a382462c-d7c7-43ed-9eaa-2f1c1421d744", "content": "SonicWall\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305fSSL-VPN\u306eMFA\u30d0\u30a4\u30d1\u30b9\u306e\u65b0\u305f\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\n\nSonicWall\u306f\u3001SonicOS\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e7\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u4e2d\u306b\u306f\u3001\u3059\u3067\u306b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bSSL-VPN\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-19868\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u4ee3\u66ff\u306e\u8a8d\u8a3c\u65b9\u5f0f\u306b\u5bfe\u3059\u308b\u6709\u52b9\u306a\u8a8d\u8a3c\u60c5\u5831\u3092\u6301", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzrc37ha6x2d"}, {"timestamp": "2026-11-08T01:47:47.460Z", "date_only": false, "value": "2026-11-08T01:47:47.460563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzrc65df3g2p", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "65eba510-7203-4b0b-8046-16ab60335d38", "content": "\u30cf\u30c3\u30ab\u30fc\u304cSonicWall SSL VPN\u306e\u6b20\u9665\u3092\u60aa\u7528\u3001SAML\u8a8d\u8a3c\u3068MFA\u3092\u56de\u907f\n\nSonicWall\u306f\u3001SonicOS SSLVPN\u306e\u8a8d\u8a3c\u5f37\u5236\u306b\u95a2\u3059\u308b\u6b20\u9665\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304cSAML\u8a8d\u8a3c\u3068\u3001\u305d\u308c\u306b\u4ed8\u968f\u3059\u308b\u591a\u8981\u7d20\u8a8d\u8a3c\uff08MFA\uff09\u306e\u4fdd\u8b77\u3092\u56de\u907f\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u554f\u984c\u306f\u300cCVE-2026-19868\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001SSLVPN\u306e\u30ed\u30b0\u30a4\u30f3\u3067SAML\u3092\u6709\u52b9\u306b\u3057\u3066\u3044\u308b\u74b0\u5883\u304c\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzrc65df3g2p"}, {"timestamp": "2026-11-08T06:01:16.247Z", "date_only": false, "value": "2026-11-08T06:01:16.247381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mzrqdd2fmcpj", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7d744793-e22c-47f6-b5e6-7a3e5e3cb1e0", "content": "North Korea's $6.34B Binance heist + 3 zero-days\n\n\u2022 TraderTraitor fake job interviews stole $6.34B\n\u2022 CVE-2026-19868 bypasses VPN MFA (actively exploited)\n\u2022 CVE-2026-123614 imgproxy CRITICAL heap overflow\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #NorthKorea", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3mzrqdd2fmcpj"}, {"timestamp": "2026-11-08T07:00:17Z", "date_only": false, "value": "2026-11-08T07:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGOzRyg3faOKVzSZBSiOh6bcwp83yD-mIWSZO88jCUAAqFw", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fcec14cd-5419-4108-b6e7-19b266a53523", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-08T07:00:17Z", "date_only": false, "value": "2026-11-08T07:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EGOzRyg3faOKVzSZBSiOh6bcwp83yD-mIWSZO88jCUAAqFw", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "58afba17-6807-4b29-a4d9-c360b2da384e"}, {"timestamp": "2026-11-08T07:00:29.801Z", "date_only": false, "value": "2026-11-08T07:00:29.801680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzrtnc7kk42r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "4de0c077-a0e4-44df-8d5a-8c55f35cc921", "content": "Critical SonicWall SSL VPN Authentication Flaw CVE-2026-19868 Actively Exploited In-The-Wild to Bypass SAML and MFA Protections +\u00a0Video\n\nIntroduction: A high-severity authentication enforcement flaw tracked as CVE-2026-19868 has been discovered and actively exploited in SonicWall SonicOS SSLVPN\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzrtnc7kk42r"}, {"timestamp": "2026-11-08T07:33:59.361Z", "date_only": false, "value": "2026-11-08T07:33:59.361072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mzrvj6wyjy2b", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "1f57d290-761e-41dd-8d50-cd7d4aad1b51", "content": "\ud83d\udee1\ufe0f The CVEs that mattered \u00b7 Saturday 7 November\n1. CVE-2026-19868 \u00b7 High 7.5 \u00b7 exploited \u2014 SonicWall SonicOS SSLVPN\n2. CVE-2025-41450 \u00b7 High 8.2 \u2014 Danfoss AK-SM 8xxA Series\nhttps://ax-news.com/cve\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mzrvj6wyjy2b"}, {"timestamp": "2026-11-08T07:54:52.142Z", "date_only": false, "value": "2026-11-08T07:54:52.142708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mzrwojg6v425", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "ba92787f-d1b3-4a81-82a9-68d6f9029f40", "content": "Top 3 CVE for last 7 days:\nCVE-2026-98432: 171 interactions\nCVE-2026-83844: 127 interactions\nCVE-2026-123158: 58 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19868: 14 interactions\nCVE-2026-109469: 13 interactions\nCVE-2026-123158: 10 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mzrwojg6v425"}, {"timestamp": "2026-11-08T10:15:29.114Z", "date_only": false, "value": "2026-11-08T10:15:29.114670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzs6jx6ltl2o", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9797f8b2-ee9d-4789-ac06-e0d419b6c502", "content": "Mitigating SonicWall SSL-VPN Authentication Controls: Analyzing CVE-2026-19868 and Securing Multi-Factor Authentication Paths +\u00a0Video\n\nIntroduction: Multi-factor authentication (MFA) enforcement policies are frequently treated as a catch-all security boundary, assuming that an identity provider\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzs6jx6ltl2o"}, {"timestamp": "2026-11-08T10:50:25.051Z", "date_only": false, "value": "2026-11-08T10:50:25.051157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzsaigg7jk22", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d20f6d71-0573-4092-a7cf-b3bf8fed8a9b", "content": "Securing Enterprise Perimeters: Mitigating Active Exploits in SonicWall SonicOS SSL-VPN (CVE-2026-19868) +\u00a0Video\n\nIntroduction: SonicWall has patched a high-severity authentication enforcement vulnerability tracked as CVE-2026-19868 affecting SonicOS SSL-VPN deployments configured with SAML\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzsaigg7jk22"}, {"timestamp": "2026-11-08T11:15:30.847Z", "date_only": false, "value": "2026-11-08T11:15:30.847910Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mzsbvc6pmu2h", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "85107773-1d4c-4ff9-ab6f-e220b2f8ecc1", "content": "sonicwall SonicOS fixed seven flaws, including CVE-2026-19868, an SSL-VPN SAML bypass exploited in attacks and on CISA's KEV list. No workaround exists. #infosec https://0daynews.com/articles/2026-11-07-sonicwall-sonicos-cve-2026-19868-saml-mfa-bypass/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mzsbvc6pmu2h"}, {"timestamp": "2026-11-08T15:00:08Z", "date_only": false, "value": "2026-11-08T15:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XoF-Ak8s5oVwLD4wsCffuEpEwwZzwrVfg7XU4OooXcN8vss", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "816de59c-d409-4059-b91f-464852ace9c2"}, {"timestamp": "2026-11-08T17:00:09.512Z", "date_only": false, "value": "2026-11-08T17:00:09.512671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/elcompilado.com/post/3mzsv5l2zdo2k", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "bd602cf1-da8b-4cb2-817a-1679b2111591", "content": "SonicWall parchea CVE-2026-19868, ya explotada: credenciales v\u00e1lidas de otro m\u00e9todo saltean el MFA por SAML del SSL VPN (06-07/11)", "url": "https://bsky.app/profile/elcompilado.com/post/3mzsv5l2zdo2k"}, {"timestamp": "2026-11-08T18:05:15.996Z", "date_only": false, "value": "2026-11-08T18:05:15.996843Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mzsyrx7rlc2e", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "151bf480-3986-4877-8f72-78b5992420b7", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-19868 \u2013 SonicWall SonicOS SSLVPN Use of Single-factor Authentication\u00a0Vulnerability\n\nCISA's inclusion of SonicWall's CVE-2026-19868 in the KEV catalog requires urgent executive oversight, risk assessment, and rapid\u2026\n\nhttps://thecybermind.co/595r", "url": "https://bsky.app/profile/thecybermind.co/post/3mzsyrx7rlc2e"}, {"timestamp": "2026-11-08T19:00:00Z", "date_only": false, "value": "2026-11-08T19:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/sonicwall-sonicos-sslvpn-security-restriction-bypass-vulnerability_20261109", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "52eca59e-a067-46a8-8188-03a741e5a993", "url": "https://www.hkcert.org/security-bulletin/sonicwall-sonicos-sslvpn-security-restriction-bypass-vulnerability_20261109"}, {"timestamp": "2026-11-08T19:15:31.407Z", "date_only": false, "value": "2026-11-08T19:15:31.407927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzt4p3wuqk25", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "6b3bb320-9e62-46c7-bca8-0d94fea8cad9", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-19868 \u00b7 11 people \ud83d\udd25\n2. CVE-2026-123158 \u00b7 10 people\n3. CVE-2026-123551 \u00b7 6 people\n4. CVE-2026-83844 \u00b7 6 people\n5. CVE-2026-98432 \u00b7 6 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzt4p3wuqk25"}, {"timestamp": "2026-11-08T19:15:32.288Z", "date_only": false, "value": "2026-11-08T19:15:32.288418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzt4p4a7l225", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9bd3362f-1435-4927-bc05-b903ac7f7756", "content": "1. CVE-2026-19868 \u00b7 11 people \ud83d\udd25\n\ud83d\udfe7 High 7.5 \u00b7 SonicWall SonicOS\n\nAn authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls.", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzt4p4a7l225"}, {"timestamp": "2026-11-08T20:36:12.329Z", "date_only": false, "value": "2026-11-08T20:36:12.329156Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117582736388541496", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "8eb6913a-4c29-445d-be14-6c7204201226", "content": "Tracked as CVE-2026-19868, the flaw affects the SSL VPN component of SonicOS, the operating system that runs on SonicWall firewalls. It\u2019s one of seven vulnerabilities described in an advisory published on November 6. https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/", "url": "https://infosec.exchange/users/jbhall56/statuses/117582736388541496"}, {"timestamp": "2026-11-08T20:36:19.811Z", "date_only": false, "value": "2026-11-08T20:36:19.811301Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mztba3md7c2k", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "3927b488-a22b-45aa-ae17-429d2bec9f24", "content": "Tracked as CVE-2026-19868, the flaw affects the SSL VPN component of SonicOS, the operating system that runs on SonicWall firewalls. It\u2019s one of seven vulnerabilities described in an advisory published on November 6. www.securityweek.com/sonicwall-pa...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mztba3md7c2k"}, {"timestamp": "2026-11-08T21:00:00Z", "date_only": false, "value": "2026-11-08T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2166", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e0074e42-ae73-4d27-89ff-613203c82486", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2166"}, {"timestamp": "2026-11-08T21:06:42.287Z", "date_only": false, "value": "2026-11-08T21:06:42.287890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mztcwgj4yk2r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "414c456e-1a65-4bba-88ec-54ff45199a4b", "content": "U.S. CISA adds SonicWall SonicOS SSLVPN\u00a0flaw to its Known Exploited Vulnerabilities catalog\n\nU.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)\u00a0added \u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mztcwgj4yk2r"}, {"timestamp": "2026-11-08T22:53:06.923Z", "date_only": false, "value": "2026-11-08T22:53:06.923967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pickuma.bsky.social/post/3mztiupnckm2v", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "7ea16f62-952a-4568-9400-6a9c23398fc0", "content": "What SonicWall's SSL-VPN MFA bypass means for you\n\nCVE-2026-19868 only hits SonicOS SSL-VPN set up with SAML. Here's how to tell if you're exposed, why MFA may not save you, and which version fixes it.", "url": "https://bsky.app/profile/pickuma.bsky.social/post/3mztiupnckm2v"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4391", "record": "WID-SEC-W-2026-4391", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4391", "record": "WID-SEC-W-2026-4391", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4391", "record": "WID-SEC-W-2026-4391", "field": "vulnerabilities.3.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4391", "record": "WID-SEC-W-2026-4391", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-08T23:02:56.575Z", "date_only": false, "value": "2026-11-08T23:02:56.575194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deceptioncheck.bsky.social/post/3mztjgbidt42e", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "5719b401-41df-45f4-8b0c-08ff1bfbf130", "content": "A stolen password should not open your VPN. SonicWall CVE-2026-19868 can let valid alternate credentials bypass SAML controls, potentially skipping SAML-enforced MFA. Check the build, patch, and review access.\nhttps://deceptioncheck.ai/blog/a-stolen-password-should-not-open-your-vpn", "url": "https://bsky.app/profile/deceptioncheck.bsky.social/post/3mztjgbidt42e"}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1483", "record": "CERTFR-2026-AVI-1483", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1483", "record": "CERTFR-2026-AVI-1483", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1483", "record": "CERTFR-2026-AVI-1483", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-09T00:29:58.160Z", "date_only": false, "value": "2026-11-09T00:29:58.160710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mztobuba6k2i", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "840d331e-1fb1-4527-9507-36212b59d58b", "content": "\u3010\u7dca\u6025\u3011SonicWall SonicOS\u306b\u8106\u5f31\u6027\uff08CVE-2026-19868 / CVSS 7.5\uff09\n\nSSL VPN\u3067SAML\u8a8d\u8a3c\u3068\u3001SAML\u3067\u5f37\u5236\u3057\u305fMFA\u3092\u56de\u907f\u3055\u308c\u308b\u6050\u308c\u3002CISA\u304c\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u3068\u3057\u306611/6\u306b\u8ffd\u52a0\u3002\n\u5bfe\u51e6: \u7248\u3092\u78ba\u8a8d\u3057\u3001SonicWall\u306e\u544a\u77e5\u3067\u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3092\u3002\n\nforsmile.jp/articles/son...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mztobuba6k2i"}, {"timestamp": "2026-11-09T02:05:50.837Z", "date_only": false, "value": "2026-11-09T02:05:50.837794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mzttne5s2z2t", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "63a08014-84b3-483f-97b4-f82c4f98b243", "content": "SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak\n https://isc.sans.edu/podcastdetail/10170", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mzttne5s2z2t"}, {"timestamp": "2026-11-09T05:05:24Z", "date_only": false, "value": "2026-11-09T05:05:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "49780266-f2aa-49c8-a947-1776d5e32517", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks.\n\nThe vulnerability, tracked as CVE-2026-19868 (CVSS score: 7.1 / 7.5), has been described as an authentication reinforcement", "url": "https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html"}, {"timestamp": "2026-11-09T06:21:56.468Z", "date_only": false, "value": "2026-11-09T06:21:56.468678Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mzubxbbkqj2g", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "a8531386-4b3c-4794-bf33-e7fc11dfef8c", "content": "CISA added SonicWall SonicOS authentication bypass vulnerability CVE-2026-19868 to KEV after reports of real-world exploitation, urging rapid patching.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mzubxbbkqj2g"}, {"timestamp": "2026-11-09T06:22:11.082Z", "date_only": false, "value": "2026-11-09T06:22:11.082106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mzubxpclu32z", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "b82d2c8e-61fc-4316-9742-94e302a64ffd", "content": "CISA added SonicWall SonicOS authentication bypass vulnerability CVE-2026-19868 to KEV after reports of real-world exploitation, urging rapid patching.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mzubxpclu32z"}, {"timestamp": "2026-11-09T06:22:22.491Z", "date_only": false, "value": "2026-11-09T06:22:22.491441Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mzuby2bien25", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "92570554-f91a-4657-9957-1e3b0b00e862", "content": "CISA added SonicWall SonicOS authentication bypass vulnerability CVE-2026-19868 to KEV after reports of real-world exploitation, urging rapid patching.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mzuby2bien25"}, {"timestamp": "2026-11-09T06:28:03.697Z", "date_only": false, "value": "2026-11-09T06:28:03.697608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mzucc7h6tu2o", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "670889e9-010b-4b51-ae44-6a800c1350e8", "content": "CISA warns: SonicWall SonicOS MFA bypass flaw (CVE-2026-19868) is now under active exploit risk. #Cybersecurity #Vulnerability #MFA #SonicWall #MFABypass #NetworkSecurity https://thedailytechfeed.com/sonicwall-sonicos-mfa-bypass-cisa-warns-of-active-exploit-risk/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mzucc7h6tu2o"}, {"timestamp": "2026-11-09T06:31:35.647Z", "date_only": false, "value": "2026-11-09T06:31:35.647326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thebadgamer.bsky.social/post/3mzucijr5sq2s", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "f39e5511-4c8c-4dbd-90f6-ef925bfe1686", "content": "SonicWall urges SonicOS updates after a SAML bypass entered CISA's exploited-flaw catalog, while NVD does not yet publish a fixed version.\n\n#authentication\u2026\nhttps://www.trickyworld.in/computer-tricks/cyber-security/cve-2026-19868-sonicos-authentication-bypass-risk/?utm_medium=social", "url": "https://bsky.app/profile/thebadgamer.bsky.social/post/3mzucijr5sq2s"}, {"timestamp": "2026-11-09T06:39:06.401Z", "date_only": false, "value": "2026-11-09T06:39:06.401520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzucvxybns2m", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9d868581-b32d-47b8-9417-0b28c602f509", "content": "SonicWall\u3001SAML\u3068MFA\u306b\u3088\u308b\u4fdd\u8b77\u3092\u56de\u907f\u3055\u308c\u308bSSL-VPN\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\n\nSonicWall\u306f\u3001SSL-VPN\u306e\u8a8d\u8a3c\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u3078\u306e\u5bfe\u51e6\u3092\u9867\u5ba2\u306b\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001SAML\u306b\u3088\u308b\u5236\u5fa1\u3084\u3001\u305d\u308c\u306b\u95a2\u9023\u3059\u308b\u591a\u8981\u7d20\u8a8d\u8a3c\uff08MFA\uff09\u304c\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u554f\u984c\u306f\u300cCVE-2026-19868\u300d\u3068\u3057\u3066\u7ba1\u7406\u3055\u308c\u3066\u304a\u308a\u3001SSL-VPN\u306e\u30ed\u30b0\u30a4\u30f3\u306bSAML\u3092\u5229\u7528\u3057\u3066\u3044\u308bSo", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzucvxybns2m"}, {"timestamp": "2026-11-09T06:41:53Z", "date_only": false, "value": "2026-11-09T06:41:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10595", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "aa1fd2b0-78f0-4787-bd9e-2fe888adb9e6", "content": "\ud83d\udea8 CISA adds SonicWall SonicOS MFA bypass flaw to its Known Exploited Vulnerabilities catalog.\n\nCVE-2026-19868 could bypass SAML authentication and MFA using valid alternate credentials.\n\nSonicWall is investigating a report of possible exploitation.\n\nDetails \u2193 https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "url": "https://t.me/thehackernews/10595"}, {"timestamp": "2026-11-09T06:42:10Z", "date_only": false, "value": "2026-11-09T06:42:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerNewscyber/3605", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "496d3e1b-d09d-40ce-a267-387ce7804038", "content": "\u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644\n\n\u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 SonicOS \u0634\u0631\u06a9\u062a \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (KEV) \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-19868 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS \u0645\u06cc\u0627\u0646 \u06f7.\u06f1 \u062a\u0627 \u06f7.\u06f5 \u062b\u0628\u062a \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u062f\u0631 \u0628\u06cc\u0627\u0646\u06cc\u0647\u200c\u0627\u06cc \u06a9\u0647 \u0631\u0648\u0632 \u062c\u0645\u0639\u0647 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u060c \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06af\u0632\u0627\u0631\u0634 \u0627\u062d\u062a\u0645\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0632\u0648\u062f\u062a\u0631 \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u063a\u06cc\u0631\u0646\u0638\u0627\u0645\u06cc \u0641\u062f\u0631\u0627\u0644 \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u062a\u0627 \u06f2\u06f0 \u0646\u0648\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u062e\u0628\u0631 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647\u200c\u0646\u0634\u062f\u0647 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u06cc\u0627\u0646\u200c\u0639\u0645\u0631 Global Management System \u0631\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-109593 \u0648 CVE-2026-109594 \u062a\u0634\u0631\u06cc\u062d \u06a9\u0631\u062f \u0648 \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062e\u0648\u0627\u0633\u062a \u0628\u0647 Network Security Manager \u0627\u0631\u062a\u0642\u0627 \u06cc\u0627\u0628\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3605", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-09T06:42:10Z", "date_only": false, "value": "2026-11-09T06:42:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewscyber/3605", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "99e15ed1-774c-43a2-b875-c0f280cf7d04", "content": "\u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644\n\n\u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 SonicOS \u0634\u0631\u06a9\u062a \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (KEV) \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-19868 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS \u0645\u06cc\u0627\u0646 \u06f7.\u06f1 \u062a\u0627 \u06f7.\u06f5 \u062b\u0628\u062a \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u062f\u0631 \u0628\u06cc\u0627\u0646\u06cc\u0647\u200c\u0627\u06cc \u06a9\u0647 \u0631\u0648\u0632 \u062c\u0645\u0639\u0647 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u060c \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06af\u0632\u0627\u0631\u0634 \u0627\u062d\u062a\u0645\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0632\u0648\u062f\u062a\u0631 \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u063a\u06cc\u0631\u0646\u0638\u0627\u0645\u06cc \u0641\u062f\u0631\u0627\u0644 \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u062a\u0627 \u06f2\u06f0 \u0646\u0648\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u062e\u0628\u0631 \u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0633\u0648\u0646\u06cc\u06a9\u200c\u0648\u0627\u0644 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u0635\u0644\u0647\u200c\u0646\u0634\u062f\u0647 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u06cc\u0627\u0646\u200c\u0639\u0645\u0631 Global Management System \u0631\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-109593 \u0648 CVE-2026-109594 \u062a\u0634\u0631\u06cc\u062d \u06a9\u0631\u062f \u0648 \u0627\u0632 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062e\u0648\u0627\u0633\u062a \u0628\u0647 Network Security Manager \u0627\u0631\u062a\u0642\u0627 \u06cc\u0627\u0628\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3605"}, {"timestamp": "2026-11-09T06:57:24.614Z", "date_only": false, "value": "2026-11-09T06:57:24.614674Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzudwp4wyu2c", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "37c9f0ef-77de-4051-99f6-ec5242ae34da", "content": "\u30cf\u30c3\u30ab\u30fc\u304cSonicWall SonicOS\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001SAML\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\n\nSonicWall\u306f\u3001SonicOS SSLVPN\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u5f37\u5236\u306e\u4e0d\u5099\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304cSAML\u8a8d\u8a3c\u3068\u3001\u305d\u308c\u306b\u95a2\u9023\u3059\u308b\u591a\u8981\u7d20\u8a8d\u8a3c\uff08MFA\uff09\u306b\u3088\u308b\u4fdd\u8b77\u3092\u56de\u907f\u3067\u304d\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u554f\u984c\u306f\u300cCVE-2026-19868\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001SSLVPN\u306e\u30ed\u30b0\u30a4\u30f3\u3067SAML\u3092\u6709\u52b9\u306b\u3057\u3066\u3044\u308b\u74b0\u5883\u304c\u5f71\u97ff\u3092\u53d7\u3051", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzudwp4wyu2c"}, {"timestamp": "2026-11-09T07:00:09.207Z", "date_only": false, "value": "2026-11-09T07:00:09.207466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzue3m7tgx25", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d12dfe75-a1dc-4c8c-94fb-bdc6c12a09eb", "content": "\ud83e\udd16 CISA KEV: CVE-2026-19868, SonicWall SonicOS SSLVPN auth bypass \u2014 valid credentials via an alternate auth method let an attacker skip SAML and its enforced MFA. CVSS 7.5, exploitation suspected.\nhttps://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzue3m7tgx25"}, {"timestamp": "2026-11-09T07:15:25.901Z", "date_only": false, "value": "2026-11-09T07:15:25.901568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzueww3agn27", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9baf41db-d9e8-4ab1-9135-f04530941b37", "content": "Securing the Perimeter: Mitigating CVE-2026-19868 and SonicOS SSL-VPN Authentication Flaws +\u00a0Video\n\nIntroduction: Multi-factor authentication (MFA) remains a foundational pillar of modern defense-in-depth, yet its efficacy relies entirely on uniform enforcement across every authentication pathway.\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzueww3agn27"}, {"timestamp": "2026-11-09T07:41:33Z", "date_only": false, "value": "2026-11-09T07:41:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/seVLdycqP_5VFeHxlXLg-F2MZ9zMZjI2U5qFbOjQlCsPJg", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "ccacde2e-99c0-4d89-8bae-870772b1c40c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-09T07:41:33Z", "date_only": false, "value": "2026-11-09T07:41:33.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/seVLdycqP_5VFeHxlXLg-F2MZ9zMZjI2U5qFbOjQlCsPJg", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0ccd2f44-3cc7-4a7b-a955-c688a391bbb7"}, {"timestamp": "2026-11-09T07:49:41Z", "date_only": false, "value": "2026-11-09T07:49:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/sonicwall-rilevato-sfruttamento-in-rete-della-cve-2026-19868", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "cbe919f6-deca-4098-a759-924d3a7251be", "content": "Rilasciati aggiornamenti di sicurezza per risolvere 7 vulnerabilit\u00e0, di cui 4 con gravit\u00e0 \"alta\", che interessano SonicOS, sistema operativo utilizzato nei firewall e negli appliance di sicurezza di SonicWall. Tra queste si evidenzia la CVE-2026-19868 per la quale sono stati osservati tentativi di sfruttamento attivo in rete.", "url": "https://www.acn.gov.it/portale/w/sonicwall-rilevato-sfruttamento-in-rete-della-cve-2026-19868"}, {"timestamp": "2026-11-09T08:02:07.447Z", "date_only": false, "value": "2026-11-09T08:02:07.447722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mzuhkfsk3x2f", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "82efdb96-bcd9-4d3f-a812-07fba7da885b", "content": "CISA\u3001SonicWall SonicOS \u306eMFA\u56de\u907f\u8106\u5f31\u6027\u3092\u8b66\u544a - \u60aa\u7528\u5831\u544a\u3042\u308a\n\nSonicWall SonicOS \u306e SAML\u8a8d\u8a3c\u56de\u907f\u8106\u5f31\u6027 CVE-2026-19868 \u304c\u3001\u60aa\u7528\u306e\u53ef\u80fd\u6027\u3042\u308a\u3068\u3057\u3066 CISA \u306e\u65e2\u77e5\u60aa\u7528\u8106\u5f31\u6027(KEV)\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u307e\u3057\u305f\u3002MFA\u4fdd\u8b77\u3092\u30d0\u30a4\u30d1\u30b9\u53ef\u80fd\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mzuhkfsk3x2f"}, {"timestamp": "2026-11-09T08:05:38.374Z", "date_only": false, "value": "2026-11-09T08:05:38.374778Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinity.sh/post/3mzuhqpoa3w2p", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "bbebbe30-615c-47bc-8da8-d39c119a7756", "content": "CVE-2026-19868: SonicWall SSL-VPN lets local passwords bypass SAML MFA. Same pattern in GitLab API tokens, GitHub PATs, Cloudflare Access. Every identity platform with multiple auth paths has this bug. Details + detection patterns:", "url": "https://bsky.app/profile/trinity.sh/post/3mzuhqpoa3w2p"}, {"timestamp": "2026-11-09T08:15:21.625Z", "date_only": false, "value": "2026-11-09T08:15:21.625348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzuic3xvku2u", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "cad4e6d0-9da3-43ef-b1c5-8f3eec02bbeb", "content": "2/5 \u26a0\ufe0f CVE-2026-19868 activement exploit\u00e9e : utilisation d'une authentification \u00e0 un seul facteur dans SonicWall SonicOS SSLVPN\n\n\ud83d\udd17 https://infonewscyber.fr/info/cve-2026-19868-activement-exploitee-utilisation-d-une-authentification-7340dbad9c1e77ec", "url": "https://bsky.app/profile/infonewscyber.bsky.social/post/3mzuic3xvku2u"}, {"timestamp": "2026-11-09T08:21:40.826Z", "date_only": false, "value": "2026-11-09T08:21:40.826455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mzuinf4bz22n", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "bb6f14d7-80e6-4039-9800-10bafb0396f5", "content": "[1/2] SonicWall SonicOS: CISA ha messo in KEV CVE-2026-19868, bypass dell'autenticazione SAML (MFA incluso) sulla SSL VPN, se il login SAML \u00e8 attivo. SonicWall parla di possibile sfruttamento. Fix: 7.3.4-7013 / 8.2.3-8015. #SonicWall", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mzuinf4bz22n"}, {"timestamp": "2026-11-09T08:21:41.300Z", "date_only": false, "value": "2026-11-09T08:21:41.300163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mzuinf5e6s2n", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "35710c8e-4ee3-4d93-a312-8ed5ccc1d39b", "content": "[1/2] SonicWall SonicOS: CISA ha messo in KEV CVE-2026-19868, bypass dell'autenticazione SAML (MFA incluso) sulla SSL VPN, se il login SAML \u00e8 attivo. SonicWall parla di possibile sfruttamento. Fix: 7.3.4-7013 / 8.2.3-8015. #SonicWall", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mzuinf5e6s2n"}, {"timestamp": "2026-11-09T08:52:29Z", "date_only": false, "value": "2026-11-09T08:52:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0471", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "9eabaf2f-04c1-4ce2-a2be-d881e20ff5bb", "content": "SonicWall heeft zeven kwetsbaarheden verholpen in SonicOS voor Gen7- en Gen8-firewalls. De kwetsbaarheid met kenmerk CVE-2026-19868 heeft een CVSS-score van 7.1 en betreft een fout in de authenticatiehandhaving binnen de SSL-VPN-functionaliteit. Een kwaadwillende met geldige inloggegevens voor een alternatieve authenticatiemethode kan de kwetsbaarheid op afstand misbruiken om de SAML-authenticatie te omzeilen. Hierdoor kan ook multifactorauthenticatie (MFA), die via SAML wordt afgedwongen, worden omzeild. SonicWall heeft onderzoek gedaan naar meldingen van mogelijk actief misbruik. Inmiddels is de kwetsbaarheid ook opgenomen in de Known Exploited Vulnerabilities-catalogus van CISA.\n\nDe kwetsbaarheden met kenmerken CVE-2026-107154 en CVE-2026-107155 hebben beide een CVSS-score van 8.8 en betreffen respectievelijk een fout in de sessievalidatie en een onjuist beveiligd cross-domain-beleid in de beheerinterface van SonicOS. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden onder specifieke omstandigheden op afstand misbruiken om ongeautoriseerde handelingen uit te voeren. Hierbij is wel gebruikersinteractie vereist.\n\nDe kwetsbaarheid met kenmerk CVE-2026-82308 heeft een CVSS-score van 7.5 en betreft een heap-based buffer overflow in de SSL-VPN-functionaliteit. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheid op afstand misbruiken om een Denial-of-Service (DoS) te veroorzaken.\n\nDe overige drie kwetsbaarheden betreffen twee buffer-overflows in de TACACS+-authenticatiefunctionaliteit en een zwakke wachtwoordhashing op virtuele SonicOS-appliances. Misbruik van de buffer-overflows kan leiden tot verstoring van de dienstverlening. De zwakke wachtwoordhashing kan een kwaadwillende met bestaande lokale toegang in staat stellen een platformcredential te achterhalen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0471"}, {"timestamp": "2026-11-09T09:52:29.673Z", "date_only": false, "value": "2026-11-09T09:52:29.673156Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0471", "record": "NCSC-2026-0471", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-09T09:52:29.673Z", "date_only": false, "value": "2026-11-09T09:52:29.673156Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0471", "record": "NCSC-2026-0471", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T09:52:29.673Z", "date_only": false, "value": "2026-11-09T09:52:29.673156Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0471", "record": "NCSC-2026-0471", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-09T10:30:07.861Z", "date_only": false, "value": "2026-11-09T10:30:07.861606Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mzupt3f4nj2r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "6eddfb01-9f1f-4fab-8828-974027341409", "content": "\ud83d\udce2 [VULN] SonicWall SonicOS : la CISA alerte sur un contournement de MFA - CVE-2026-19868\n\nL\u2019agence am\u00e9ricaine CISA vient d\u2019inscrire une nouvelle vuln\u00e9rabilit\u00e9 \u00e0 son catalogue des failles exploit\u00e9es (KEV).\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mzupt3f4nj2r"}, {"timestamp": "2026-11-09T10:34:26.025Z", "date_only": false, "value": "2026-11-09T10:34:26.025497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mzuq2p7ldk2g", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d09387e8-14f0-4bb7-a356-87d0f513994b", "content": "Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/11/09/e...\n\n#cybersecurity #cybersecuritynews #firewall #VPN #vulnerability", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mzuq2p7ldk2g"}, {"timestamp": "2026-11-09T11:05:28.238Z", "date_only": false, "value": "2026-11-09T11:05:28.238180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mzursaykm42c", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "c395b7d7-0716-4225-bee5-27b339950a94", "content": "U.S. CISA has added the SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868, with a CVSS score of 7.5, to its Known Exploited Vulnerabilities catalog.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mzursaykm42c"}, {"timestamp": "2026-11-09T11:18:25.739Z", "date_only": false, "value": "2026-11-09T11:18:25.739466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/primereports.bsky.social/post/3mzusjh4og227", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "dcdbf28c-dec2-45c7-b624-93a3c23a053e", "content": "Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)", "url": "https://bsky.app/profile/primereports.bsky.social/post/3mzusjh4og227"}, {"timestamp": "2026-11-09T11:32:07.366Z", "date_only": false, "value": "2026-11-09T11:32:07.366+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4391", "record": "WID-SEC-W-2026-4391", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-09T11:34:21.959Z", "date_only": false, "value": "2026-11-09T11:34:21.959080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mzutfvplek25", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "107e1672-16aa-44a3-982a-8d34c4fae29f", "content": "Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)\n\nwww.helpnetsecurity.com/2026/11/09/e...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mzutfvplek25"}, {"timestamp": "2026-11-09T11:45:28.890Z", "date_only": false, "value": "2026-11-09T11:45:28.890527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzutzrsisb27", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "ad4f76e8-5a9a-4af9-8024-481ce5f0b889", "content": "SonicWall SSL-VPN SAML Bypass Vulnerability (CVE-2026-19868): Technical Deep Dive, Exploitation Mechanics, and Comprehensive Hardening Guide +\u00a0Video\n\nIntroduction: The discovery of CVE-2026-19868 in SonicWall\u2019s SonicOS SSL-VPN architecture highlights critical structural flaws in modern\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzutzrsisb27"}, {"timestamp": "2026-11-09T12:05:54.208Z", "date_only": false, "value": "2026-11-09T12:05:54.208768Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/norviktech.bsky.social/post/3mzuv6cs6sl2f", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "13ba730c-0dd6-4044-99bd-8973dfac3dcb", "content": "La vulnerabilidad CVE-2026-19868 en SonicWall representa un fallo cr\u00edtico que podr\u00eda permitir a un atacante eludir los mecanismos de autenticaci\u00f3n multifactor (MFA) y SAML utilizando credenciales v\u00e1lidas.\n\nhttps://norvik.tech/news/analisis-sonicwall-cve-2026-19868", "url": "https://bsky.app/profile/norviktech.bsky.social/post/3mzuv6cs6sl2f"}, {"timestamp": "2026-11-09T13:31:02.706Z", "date_only": false, "value": "2026-11-09T13:31:02.706339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberexpertsbrief.bsky.social/post/3mzuzwl54q22p", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "c0e8a9ab-4756-49e5-9858-980c8d4c9274", "content": "SonicWall SSL VPN (CVE-2026-19868): a user with a local or LDAP password can skip SAML MFA, and CISA lists it as exploited. Upgrade Gen7 to 7.3.4-7013, Gen8 to 8.2.3-8015, and turn off non-SAML VPN logins.", "url": "https://bsky.app/profile/cyberexpertsbrief.bsky.social/post/3mzuzwl54q22p"}, {"timestamp": "2026-11-09T13:37:12.168Z", "date_only": false, "value": "2026-11-09T13:37:12.168195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mzv2bhxffc26", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "58adcd1c-3d3a-478c-bdfb-aebf3cf65dbc", "content": "\u26a0\ufe0f CVE-2026-19868 (CVSS 7.5, CISA KEV): SonicOS SSLVPN flaw lets users with valid credentials for another login method bypass SAML and SAML-enforced MFA. Exploited in the wild. Upgrade to 7.3.4-7013 / 8.2.3-8015. \n\nQuery: http. body~\"id=\\\"sslvpn-portal\\\"\" AND fingerprints.os.product=\"SonicOS\"", "url": "https://bsky.app/profile/modat-io.bsky.social/post/3mzv2bhxffc26"}, {"timestamp": "2026-11-09T13:43:01Z", "date_only": false, "value": "2026-11-09T13:43:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/3684", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "3722017c-b759-4ba7-a93d-f3289c7b2190", "content": "CISA adds SonicWall SonicOS MFA bypass flaw to its Known Exploited Vulnerabilities catalog.\n\nCVE-2026-19868 could bypass SAML authentication and MFA using valid alternate credentials.", "url": "https://t.me/CyberDispatch/3684"}, {"timestamp": "2026-11-09T15:01:29.148Z", "date_only": false, "value": "2026-11-09T15:01:29.148505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzv6yaxp725b", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "6a50d0b1-9703-4101-8b08-dcf9b5079bf8", "content": "CISA KEV | CVE-2026-19868 | SonicWall / SonicOS SSLVPN\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1401", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzv6yaxp725b"}, {"timestamp": "2026-11-09T15:09:26.520Z", "date_only": false, "value": "2026-11-09T15:09:26.520490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzv7gjgimx2r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0ff8abfe-267c-4e9f-aec5-2beeb485d4a8", "content": "\ud83e\udd16 CISA KEV: CVE-2026-19868 (CVSS 7.5). SonicOS SSLVPN flaw: valid credentials for an alternate auth method bypass SAML controls and SAML-enforced MFA. Exploited in the wild per CISA.\nhttps://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzv7gjgimx2r"}, {"timestamp": "2026-11-09T17:02:27.684Z", "date_only": false, "value": "2026-11-09T17:02:27.684853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mzvfqmk47h26", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d5089a9c-0b44-4f11-9e35-62455173885e", "content": "~Checkpoint~\nSonicWall, Barracuda, and OpenSSH flaws face active exploitation alongside a cPGuard supply-chain backdoor and APT29 mobile espionage against Ukraine.\n-\nIOCs: CVE-2026-19868, CVE-2026-58868\n-\n#CyberEspionage #ExploitedVulnerability #Ransomware #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mzvfqmk47h26"}, {"timestamp": "2026-11-09T19:16:51.308Z", "date_only": false, "value": "2026-11-09T19:16:51.308994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzvn7ebnzc2e", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "98ae7fb2-44df-45f4-bc12-c54d067c3415", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-123158 \u00b7 36 people \ud83d\udd25\n2. CVE-2026-19868 \u00b7 28 people \ud83d\udd25\n3. CVE-2026-98432 \u00b7 14 people\n4. CVE-2026-83844 \u00b7 12 people\n5. CVE-2026-102895 \u00b7 9 people \ud83d\udd25\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzvn7ebnzc2e"}, {"timestamp": "2026-11-09T19:16:52.308Z", "date_only": false, "value": "2026-11-09T19:16:52.308663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzvn7ehsck2e", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "92b6c83c-36a0-47ac-b462-89dd42b1383c", "content": "2. CVE-2026-19868 \u00b7 28 people \ud83d\udd25\n\ud83d\udfe7 High 7.5 \u00b7 SonicWall SonicOS\n\nAn authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls.", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzvn7ehsck2e"}, {"timestamp": "2026-11-09T19:42:13.887Z", "date_only": false, "value": "2026-11-09T19:42:13.887", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19868", "record": "FKIE_CVE-2026-19868", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-09T20:08:26.840Z", "date_only": false, "value": "2026-11-09T20:08:26.840459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techiesjournal.com/post/3mzvq4qa7bj2i", "record": "cve-2026-19868", "field": "creation_timestamp", "uuid": "371702a0-6b64-4cae-87f9-566e84220168", "content": "SonicWall's SSL VPN authentication flaw affects certain SAML-enabled Gen7 and Gen8 systems.\n\n#Cybersecurity #SonicWall #SAML #SSLVPN #TechiesJournal #PrasadKukkala\n\nhttps://www.techiesjournal.com/sonicwall-cve-2026-19868-saml-mfa-bypass/11067/?utm_source=bluesky&utm_medium=social", "url": "https://bsky.app/profile/techiesjournal.com/post/3mzvq4qa7bj2i"}, {"timestamp": "2026-11-09T22:20:32.941Z", "date_only": false, "value": "2026-11-09T22:20:32.941866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/icsda.bsky.social/post/3mzvxjfefwg2x", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "79b72254-b11f-4101-854f-e7e629923da8", "content": "SonicWall \u7684 SSL VPN \u6f0f\u6d1e CVE-2026-19868 \u80fd\u7e5e\u904e SAML \u548c MFA\uff0cCISA \u9650 14 \u5929\u4fee\u88dc\u3002\u591a\u56e0\u7d20\u9a57\u8b49\u9019\u6b21\u8b8a\u6210\u300c\u591a\u6b64\u4e00\u8209\u300d\ud83d\ude43 \u53e6\u5916 Swarm \u7684\u5b98\u65b9\u767c\u5e03\u7ba1\u9053\u88ab\u52ab\uff0c\u9023\u9322\u5305\u91d1\u9470\u90fd\u88ab\u9806\u8d70\uff0c\u81ea\u52d5\u5316\u679c\u7136\u4e5f\u81ea\u52d5\u5316\u4e86\u707d\u96e3\u3002#\u8cc7\u5b89 #SonicWall #\u4f9b\u61c9\u93c8\u653b\u64ca", "url": "https://bsky.app/profile/icsda.bsky.social/post/3mzvxjfefwg2x"}, {"timestamp": "2026-11-10T00:15:29.707Z", "date_only": false, "value": "2026-11-10T00:15:29.707940Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzw5wwfwca2i", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fceb83cc-d9f4-4a61-ade5-299ac5e10998", "content": "Critical Vulnerability Alert: SonicWall SonicOS SSLVPN SAML Authentication & MFA Bypass (CVE-2026-19868) +\u00a0Video\n\nIntroduction: In early November 2026, CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities (KEV) catalog following advisories from international cyber security authorities.\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzw5wwfwca2i"}, {"timestamp": "2026-11-10T02:00:11.309Z", "date_only": false, "value": "2026-11-10T02:00:11.309196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzwds5snqj2l", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "97dd6b81-6ee8-4f83-b950-0e00c6042378", "content": "Mitigating SonicWall CVE-2026-19868: Securing SSL-VPN Services Against Active SAML MFA Bypass Exploitation +\u00a0Video\n\nIntroduction: Multi-factor authentication (MFA) deployment alone is no longer a silver bullet against advanced perimeter breaches, as highlighted by active in-the-wild exploitation of\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzwds5snqj2l"}, {"timestamp": "2026-11-10T03:40:05.461Z", "date_only": false, "value": "2026-11-10T03:40:05.461303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mzwjer3ymq2d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "5913734a-640c-40bf-974c-07c351a1498d", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\nSonicWall \u306e CVE-2026-19868 \u306f SAML \u65b9\u5f0f\u306e MFA \u3082\u8fc2\u56de\u3057\u3046\u308b\u3001Linux 7.4-rc2 \u306e FAT32\u300c162\u500d\u300d\u306f\u4f5c\u8005\u304c QEMU/KVM \u4e0a\u3067\u6e2c\u3063\u305f\u5024\u3001BenchUp \u306f\u65e7 KetchUp \u306e Rust \u88fd\u6728\u5de53D\u30e2\u30c7\u30e9\u30fc\u3001Node.js \u306f 27 \u304b\u3089\u5e741\u56de\u30fb\u3059\u3079\u3066 LTS \u306e\u4f53\u5236\u3078\u3001Plex2Shell \u306e\u5f71\u97ff\u7248\u306f 1.43.3.10861 \u672a\u6e80\u3067 QNAP \u304c\u6ce8\u610f\u559a\u8d77\uff082026/11/10 Linu... https://blog.fuga.jp/posts/2026-11-10-linux-oss-trend/", "url": "https://bsky.app/profile/densuke.bsky.social/post/3mzwjer3ymq2d"}, {"timestamp": "2026-11-10T04:30:54.885Z", "date_only": false, "value": "2026-11-10T04:30:54.885857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzwm7o3t722r", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "d3127fb7-998b-4f78-87e7-9dc04a2c8976", "content": "Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)\n\nSonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With \u2026\n#hackernews #ml #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzwm7o3t722r"}, {"timestamp": "2026-11-10T07:33:06.491Z", "date_only": false, "value": "2026-11-10T07:33:06.491183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mzwwfhnqpr2d", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e6723279-7895-4622-97ac-3d179b8b2982", "content": "\ud83d\udee1\ufe0f The CVEs that mattered \u00b7 Monday 9 November\n1. CVE-2026-123158 \u00b7 High 8.1 \u00b7 exploited \u2014 OpenBSD OpenSSH\n2. CVE-2026-19868 \u00b7 High 7.5 \u00b7 exploited \u2014 SonicWall SonicOS SSLVPN\n3. CVE-2024-54529 \u2014 Breaking the Sound Barrier, Part II: Exp\nhttps://ax-news.com/cve\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mzwwfhnqpr2d"}, {"timestamp": "2026-11-10T08:55:44.034Z", "date_only": false, "value": "2026-11-10T08:55:44.034374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mzx2ylynmf2i", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "aa5286f2-264a-40cd-92f1-2f383cfcaddc", "content": "\u3010\u65e5\u672c\u8a9e\u306e\u516c\u5f0f\u60c5\u5831\u3011CVE-2026-19868\nSonicWALL\u306eSonicOS\u306b\u304a\u3051\u308b\u5358\u4e00\u8981\u7d20\u8a8d\u8a3c\u306e\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCISA \u306e\u60aa\u7528\u78ba\u8a8d\uff0811/6\uff09\u306e\u5f8c\u3001JVN \u304c\u65e5\u672c\u8a9e\u306e\u516c\u5f0f\u60c5\u5831\u3092\u516c\u958b\nhttps://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-042565.html\n#\u8106\u5f31\u6027 #SonicWall", "url": "https://bsky.app/profile/vulnidx-jp.bsky.social/post/3mzx2ylynmf2i"}, {"timestamp": "2026-11-10T09:00:22.851Z", "date_only": false, "value": "2026-11-10T09:00:22.851296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mzx3azrkji2j", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e9140881-a691-4542-9d1f-fd83701c512c", "content": "SonicWall SonicOS MFA bypass (CVE-2026-19868, CVSS 7.1) is in CISA KEV. Valid credentials for an alternate login skip SAML MFA on the SSL-VPN. Fixed: 7.3.4-7013 / 8.2.3-8015. Check SAML-enabled VPNs and logs. #SonicWall\n\ndiesec.com/2026/11/soni...\ndiesec.com/de/2026/11/s...", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mzx3azrkji2j"}, {"timestamp": "2026-11-10T10:30:09.763Z", "date_only": false, "value": "2026-11-10T10:30:09.763172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mzxabxzfxo2y", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "0671f7e0-e789-41f3-ae02-5f99e5dd3bdb", "content": "\ud83d\udce2 SonicWall corrige un bypass MFA SSL-VPN activement exploit\u00e9 (CVE-2026-19868)\n\n\ud83d\udcf0 Source : BleepingComputer | Date : 6 novembre 2026 SonicWall a publi\u00e9 des mises \u00e0 jour de s\u00e9curit\u00e9 corrigeant sept vuln\u00e9rabilit\u00e9s dans SonicOS, dont\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#SSLVPN #SonicWall #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mzxabxzfxo2y"}, {"timestamp": "2026-11-10T11:10:26.355Z", "date_only": false, "value": "2026-11-10T11:10:26.355954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mzxck2fdjw2o", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "11acf74f-249f-4903-8c74-d1e532f6b0ea", "content": "SonicWall SonicOS SSL-VPN Authentication Bypass (CVE-2026-19868): Critical Defense & Architecture Guide +\u00a0Video\n\nIntroduction: SonicWall has addressed multiple vulnerabilities affecting SonicOS, the core operating system powering SonicWall firewalls and network security appliances. The most severe\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mzxck2fdjw2o"}, {"timestamp": "2026-11-10T22:40:04.199Z", "date_only": false, "value": "2026-11-10T22:40:04.199956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/z3usalmighty.bsky.social/post/3mzyj3ajj7m2h", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "e8f73ce0-c06e-4f2f-b8ff-ef62841cf74d", "content": "FCEB agencies have until Nov 20 to patch CVE-2026-19868. The same SonicWall advisory covers three more high-severity flaws, including a pre-auth heap overflow in the same SSL-VPN service. Treat the whole service as exposed while you inventory.\n\n#CyberSecurity #DataLeadership", "url": "https://bsky.app/profile/z3usalmighty.bsky.social/post/3mzyj3ajj7m2h"}, {"timestamp": "2026-11-12T11:00:29.712Z", "date_only": false, "value": "2026-11-12T11:00:29.712398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3n24cw5gapf23", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "ecb35a2b-8bfb-4097-8369-d858aa820d19", "content": "SonicWall patches critical VPN auth bypass: CVE-2026-19868 lets attackers with one set of credentials dodge SAML and MFA checks. If you're running SonicOS,\u2026\n\nhttps://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/\n\n#cybersecurity #infosec", "url": "https://bsky.app/profile/getpacketai.bsky.social/post/3n24cw5gapf23"}, {"timestamp": "2026-11-12T12:53:04.731Z", "date_only": false, "value": "2026-11-12T12:53:04.731525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3n24j7gqllk2b", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "37aacaf3-7871-4820-989e-af2d36abf85a", "content": "sonicwall's CVE-2026-19868 lets an attacker holding valid credentials for an alternate authentication method bypass saml controls on sonicos ssl-vpn, including saml-enforced mfa. cisa lists it as exploited.\n\nbleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jarkafterdark.com/post/3n24j7gqllk2b"}, {"timestamp": "2026-11-13T08:12:16.130Z", "date_only": false, "value": "2026-11-13T08:12:16.130108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3n26jy76vpp2x", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "f0699bef-2ec0-41d0-b95f-5e55642374a2", "content": "COGNOSCERE Tech Brief \u2014 2026-11-13\n\nCISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. This h\n\nhttps://youtube.com/watch?v=xYOFhCGUiIo\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3n26jy76vpp2x"}, {"timestamp": "2026-11-20T00:00:00Z", "date_only": true, "value": "2026-11-20", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "evidence.0.details.due_date", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T02:17:07.075Z", "anchors": {"origin": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-11-08T07:00:17Z", "date_only": false, "value": "2026-11-08T07:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGOzRyg3faOKVzSZBSiOh6bcwp83yD-mIWSZO88jCUAAqFw", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fcec14cd-5419-4108-b6e7-19b266a53523", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -68100.0, "hours": -18.916666666666668, "days": -0.7881944444444444, "min_seconds": -68100.0, "max_seconds": 18300.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -68100.0, "hours": -18.916666666666668, "days": -0.7881944444444444, "min_seconds": -68100.0, "max_seconds": 18300.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 129917.0, "hours": 36.088055555555556, "days": 1.5036689814814814, "min_seconds": 129917.0, "max_seconds": 129917.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T07:00:17Z", "date_only": false, "value": "2026-11-08T07:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGOzRyg3faOKVzSZBSiOh6bcwp83yD-mIWSZO88jCUAAqFw", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fcec14cd-5419-4108-b6e7-19b266a53523", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 631327.07595, "hours": 175.36863220833334, "days": 7.307026342013889, "min_seconds": 631327.07595, "max_seconds": 631327.07595, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T18:55:00Z", "date_only": false, "value": "2026-11-06T18:55:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-19868", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T02:17:07.075Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 699427.07595, "hours": 194.285298875, "days": 8.095220786458333, "min_seconds": 613027.07595, "max_seconds": 699427.07595, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-19868", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6df41f1-8ee1-4ffe-ac17-04dd7e011269", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T02:17:07.075Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 501410.07595, "hours": 139.2805766527778, "days": 5.803357360532408, "min_seconds": 501410.07595, "max_seconds": 501410.07595, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T07:00:17Z", "date_only": false, "value": "2026-11-08T07:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGOzRyg3faOKVzSZBSiOh6bcwp83yD-mIWSZO88jCUAAqFw", "record": "CVE-2026-19868", "field": "creation_timestamp", "uuid": "fcec14cd-5419-4108-b6e7-19b266a53523", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T02:17:07.075Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}