U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
2026-11-07T14:51:38Z•3f087dc73fd46f5506894f5f1d004750355ce497a16e2a1f3d6f1813e5c8b7a3
CVE-2024-27834CVE-2026-111560CVE-2026-116606CVE-2026-19868APT29AppleBarracuda ESGCISA KEVCozy BearSSL VPNSonicWall SonicOSactively exploited vulnerabilityauthentication bypasscritical infrastructurecryptocurrency miningcyber espionagehealthcare disruptionindustrial control systemsmobile securityroot accesswatering hole
What happened
Security news feed highlights actively exploited vulnerabilities in SonicWall SonicOS SSLVPN (CVE-2026-19868) and Apple software (CVE-2024-27834), a critical Barracuda Email Security Gateway vulnerability chain enabling unauthenticated root access, APT29 watering-hole attacks targeting iOS and Android users, and disruptive cyber incidents affecting healthcare and European refrigeration systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 3f087dc73fd46f5506894f5f1d004750355ce497a16e2a1f3d6f1813e5c8b7a3
- Enrichment time
- 2026-11-07T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.