NCSC Netherlands دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۳:۲۲

NCSC-2026-0471 [1.00] [M/H] Kwetsbaarheden verholpen in SonicOS van SonicWall

SonicWall heeft zeven kwetsbaarheden verholpen in SonicOS voor Gen7- en Gen8-firewalls. De kwetsbaarheid met kenmerk CVE-2026-19868 heeft een CVSS-score van 7.1 en betreft een fout in de authenticatiehandhaving binnen de SSL-VPN-functionaliteit. Een kwaadwillende met geldige inloggegevens voor een alternatieve authenticatiemethode kan de kwetsbaarheid op afstand misbruiken om de SAML-authenticatie te omzeilen. Hierdo…

Vulnerabilities & Zero-Day

Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

SecurityWeek دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۵:۴۳

Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH

The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit. The post Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH appeared first on SecurityWeek.

Vulnerabilities & Zero-Day Identity & Access Security

Source

CyberScoop دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۴:۳۰

AI doesn’t have to go rogue to break the world

AI systems are learning to exploit loopholes in everything from software to tax law. The biggest threat may not be malicious intent, but machines doing exactly what we ask. The post AI doesn’t have to go rogue to break the world appeared first on CyberScoop.

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

CERT Polska دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۴:۲۵

Vulnerabilities in WidzialniCMS software

CERT Polska coordinated disclosure of 4 vulnerabilities (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 and CVE-2026-112205) found in WidzialniCMS software.

Vulnerabilities & Zero-Day

Source

Help Net Security دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۴:۰۰

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868 CVE-2026-19868 is an authentication enforcement flaw in the SonicOS SSL-VPN service, and is exploitable only if SAML is enabled for SSL-VPN log…

Vulnerabilities & Zero-Day Identity & Access Security

Source