SonicWall SSL VPN (CVE-2026-19868): exploited flaw that bypasses SAML and MFA
On SonicWall firewalls that use SAML for SSL VPN, attackers with stolen credentials could skip SAML checks — including MFA. Fixed firmware and what to do.
Read articleAll CySec articles about Firewalls & networks: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
On SonicWall firewalls that use SAML for SSL VPN, attackers with stolen credentials could skip SAML checks — including MFA. Fixed firmware and what to do.
Read articleGuests, cameras, printers and the accounting server on the same network? Segmentation stops one infected device from reaching everything.
Read articlePersonal admin accounts, trusted hosts, no management on WAN, lockout and firmware updates — the first settings for any FortiGate.
Read articleWorking from home and on the road is normal now. How to give employees remote access without opening the company to attackers.
Read articleA critical authentication bypass in FortiOS, FortiManager, FortiAnalyzer and other Fortinet products was exploited in the wild. Fixed versions and checks.
Read articleTwo chained flaws in Cisco firewall VPN services were exploited before patches existed, prompting an emergency directive. What owners of Cisco ASA should check.
Read articleCommand injection in the VPN feature of PAN-OS allowed attackers to run commands as root on the firewall itself. What to learn about edge devices.
Read articleAn out-of-bounds write in the FortiGate SSL VPN let unauthenticated attackers run code, and it was exploited in the wild. Versions to install and what to do if you cannot update.
Read articleTell us about your infrastructure and goals. We'll get back to you within one business day with next steps.