The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability affecting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog. The agency acted after reports that the flaw may have been exploited in real-world attacks.
The vulnerability is tracked as CVE-2026-19868. The source lists its CVSS score as 7.1 / 7.5. The source describes the flaw as an authentication reinforcement issue. The report does not provide further technical details about the flaw, its exploitation, affected versions, or remediation steps.