Authentication · SoBasically

CISA adds GPUStack improper authentication flaw to KEV catalog

What happened.The Cybersecurity and Infrastructure Security Agency added an actively exploited authentication bypass vulnerability in GPUStack to its Known Exploited Vulnerabilities catalog.

Why it matters.GPUStack orchestrates graphics processing clusters for large language model inference workloads. When reverse-proxy header spoofing grants administrative control, attackers hijack compute infrastructure and steal proprietary model weights. Platform engineers must upgrade GPUStack deployments to version 2.2.0 immediately. Administrators should ensure loopback proxy authentication is strictly enforced across internal load balancers.

Read Full Brief →

Source:NIST NVD

Decision brief card for SonicWall warns of active SonicOS SSL-VPN SAML bypass

SonicWallAnalysis1 min read

SonicWall warns of active SonicOS SSL-VPN SAML bypass

What happened.SonicWall released emergency security advisory SNWLID-2026-0014 warning of an actively exploited authentication bypass defect in SonicOS SSL-VPN.

Why it matters.Enterprise security perimeters rely on firewall SSL-VPN portals to shield corporate internal networks from unauthorized access. When alternate credential paths bypass SAML authentication checks, external attackers compromise private cloud resources and pivot into enterprise databases. Network security engineers must apply SonicOS maintenance firmware releases immediately. IT administrators should verify that WAN management interfaces remain restricted to trusted administrative IP addresses.

Vulnerability mechanics: Tracked as CVE-2026-19868 with a 7.5 CVSS score, the defect allows attackers to bypass security assertion markup language authentication.
Trigger conditions: The vulnerability occurs when administrators configure the SonicOS SSL-VPN gateway service with external SAML authentication enabled.
Multi-factor evasion: Authenticated network callers using alternate credential paths skip secondary identity challenges to access internal network assets directly.
Federal directive: The Cybersecurity and Infrastructure Security Agency added the vulnerability to its Known Exploited Vulnerabilities catalog under Binding Operational Directive 26-04.
Remediation releases: SonicWall published maintenance firmware hotfixes across affected appliance lines, advising operators to restrict public management access until completing patch deployment.

Official Source:SonicWall

Read Brief

Source:SonicWall