Search: CVE-2026-19868

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

This report summarizes multiple cyber threats and vulnerabilities discovered in early November 2026, including ransomware attacks, supply-chain compromises, AI-powered exploitation frameworks, and several high-severity software vulnerabilities. Notable incidents include a ransomware attack on Queens Public Library, a destructive attack on Russian web hosting provider Beget, and a supply-chain attack on the Linux security tool cPGuard. AI-assisted threat actors targeted financial and cryptocurrency sectors, while multiple critical vulnerabilities were patched in SonicWall, Android, Barracuda Email Security Gateway, and OpenSSH. Some vulnerabilities have been linked to active exploitation.