Multiple vulnerabilities have been discovered in SonicWall SonicOS. SonicOS is the operating system that powers SonicWall firewalls and network security appliances. Successful exploitation of the most severe of these vulnerabilities (CVE-2026-19868) could allow a remote unauthenticated attacker to perform unauthorized operations, gain elevated privileges, access sensitive information, or impact the integrity of the affected device. An attacker who successfully exploits these vulnerabilities could potentially modify device configurations, access protected resources, bypass security controls, or disrupt normal operations. Organizations with internet-accessible management interfaces may face increased risk from the vulnerabilities affecting the SonicOS management interface.

Affected Systems

  • SonicOS Gen7 Hardware Firewalls and Gen7 NSv, versions 7.3.3-7015 and earlier
  • SonicOS Gen8 Hardware Firewalls and Gen8 NSv, versions 8.2.2-8015 and earlier

What You Should Do

  • Apply appropriate updates provided by SonicWall to vulnerable systems immediately after appropriate testing.
  • Use vulnerability scanning to find potentially exploitable software vulnerabilities to remediate them.

Are you a BMT Client?
If you’re a BMT Managed Services client this has been taken care of for you.  All necessary updates for our clients are complete.

Not a Client?  Make Sure Your Systems are Updated
If your current IT provider has not reached out, have them check SonicWall firewalls for CVE-2026-19868. Confirm whether SSLVPN with SAML login is enabled on devices.  If yes, inquire about these updates.  Need additional assistance or more information?  Schedule a free 15-minute initial consultation with a member of our security team.