SoBasically
INTELLIGENCE BEAT2 Briefs

Firewall

2 Briefs

Verified technical decision briefs tracking firewall developments

Filter:
Cisco1SonicWall1
Cisco hallmark logoCiscoAnalysis1 min read

Cisco patches actively exploited SSL VPN denial-of-service flaw in ASA and FTD

Topographic elevation contour card for Cisco patches actively exploited SSL VPN denial-of-service flaw in ASA and FTD

What happened.Cisco published a security advisory detailing an actively exploited denial-of-service vulnerability in the Remote Access SSL VPN service of its firewall software.

Why it matters.Perimeter firewalls terminate corporate remote access tunnels. When remote unauthenticated packets trigger device crashes, attackers knock enterprise VPN access offline. Network engineering teams must install Cisco maintenance releases immediately. Administrators without immediate patch windows should evaluate secondary authentication settings on remote access tunnel groups.

Read Full Brief →
Source:NIST NVD (opens in a new tab)
All Stories1 story
Decision brief card for SonicWall patches actively exploited SSLVPN SAML multi-factor authentication bypass in SonicOS
02SonicWall hallmark logoSonicWallAnalysis1 min read

SonicWall patches actively exploited SSLVPN SAML multi-factor authentication bypass in SonicOS

What happened.SonicWall published security advisory SNWLID-2026-0014 resolving an actively exploited authentication enforcement flaw in the SonicOS SSLVPN service.

Why it matters.Perimeter firewalls protect corporate internal networks. When alternate login paths bypass multi-factor authentication, stolen directory credentials grant perimeter access. Network engineering teams must install SonicOS 7.3.4 or 8.2.3 immediately.

  • Vulnerability mechanics: Tracked as CVE-2026-19868 with a 7.5 CVSS score, an authentication enforcement defect allows users with valid alternate credentials to bypass SAML controls.
  • Exploitation impact: Attackers with directory or local credentials bypass SAML-enforced multi-factor authentication, reducing access to single-factor authentication.
  • Deployment scope: The defect affects firewalls with SSLVPN and SAML active on Gen 7 (SonicOS <= 7.3.3-7015) and Gen 8 (SonicOS <= 8.2.2-8015) appliances.
  • Active exploitation: SonicWall and CISA confirmed active exploitation, adding the vulnerability to the Known Exploited Vulnerabilities catalog.
  • Remediation releases: SonicWall released firmware updates, urging upgrades to SonicOS 7.3.4 for Gen 7 and SonicOS 8.2.3 for Gen 8.
Official Source:SonicWall Security Advisories
Decision brief card for SonicWall patches actively exploited SSLVPN SAML multi-factor authentication bypass in SonicOS
Read Brief
Source:SonicWall Security Advisories (opens in a new tab)