Page traduite et vérifiée automatiquement. La version anglaise fait foi.Certaines parties restent en anglais le temps que leur traduction soit vérifiée.Voir en anglais · Signaler une erreur de traduction
BREACH WATCH BRIEFCritique🐛 Vulnerability
CISA Adds SonicWall SonicOS SSLVPN Flaw to Known Exploited Vulnerabilities Catalog, Flagging Active Threat
CISA has listed a critical remote‑code‑execution bug in SonicWall’s SonicOS SSLVPN in its KEV catalog, indicating active exploitation. Organizations using SonicWall appliances must patch immediately and prove remediation to meet audit expectations.
Breach Watch ADTP· November 8, 2026· Security Affairs
In early 2026 a critical remote‑code‑execution vulnerability (CVE‑2026‑XXXX, CVSS 9.8) was disclosed in SonicWall’s SonicOS SSLVPN component. The flaw allows unauthenticated attackers to execute arbitrary code and gain full network access. SonicWall issued a security advisory and released patches. On 8 Nov 2026 CISA added the issue to its Known Exploited Vulnerabilities catalog, confirming that threat actors are actively leveraging the bug in the wild. The KEV listing is a signal for U.S. federal agencies and the broader community to prioritize remediation.
Pourquoi c’est important pour la confiance et la conformité
The episode highlights the need for continuous vulnerability‑management controls that generate defensible evidence of timely patching, a core control across most governance frameworks.
Continuous monitoring of vendor patches provides audit‑ready evidence of remediation.
Mapping this vulnerability to your control framework demonstrates effective risk mitigation.
Who is affected
Technology & SaaS providersFinancial services firmsHealthcare organizationsManufacturing and industrial operators
Recommended actions
Identify all SonicWall SonicOS devices and confirm they run the patched firmware version.
Deploy automated vulnerability scanning that captures remediation evidence for audit purposes.
Bibliothèque des réglementations
Toutes les lois des États américains sur la vie privée, sur une seule carte
24 États disposent d’une loi générale sur la vie privée dans la bibliothèque, aux côtés des lois de l’UE, du Royaume-Uni, des lois fédérales américaines et des lois du reste du monde : 102 au total, chacune expliquée en termes simples avec ses sources. Sélectionnez un État pour voir ce qui s’y applique.