{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:34.622Z","products":["sonicwall"],"actNowTotal":2,"results":[{"query":"sonicwall","matched":2,"actNow":2,"events":[{"id":"kev-2026-11-06-sonicwall-sonicos-sslvpn","url":"https://securitythreatpulse.com/events/kev-2026-11-06-sonicwall-sonicos-sslvpn","title":"SonicWall SonicOS SSLVPN: security flaw used in attacks","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 4 days old, so many systems are likely still unpatched. It affects a product that faces the internet or gives remote access.","tier":"today","rankScore":7,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","The confirmation is 5 days old."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-19868"],"vendor":"SonicWall","product":"SonicOS SSLVPN","affectedProducts":[{"kind":"direct","slug":"sonicwall/sonicossslvpn","vendor":"SonicWall","product":"SonicOS SSLVPN","evidence":["kev"],"vendorKey":"sonicwall","productKey":"sonicossslvpn"},{"kind":"direct","slug":"sonicwall/sonicos","vendor":"SonicWall","product":"SonicOS","evidence":["cpe"],"vendorKey":"sonicwall","productKey":"sonicos"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).","cvss":7.5,"epss":0.00532,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-11-06","kevDueDate":"2026-11-20","firstSeenAt":"2026-11-06T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-10T22:40:04.199Z"},{"id":"kev-2026-09-02-sonicwall-sma1000-appliances","url":"https://securitythreatpulse.com/events/kev-2026-09-02-sonicwall-sma1000-appliances","title":"SonicWall SMA1000 Appliances: 2 flaws used in attacks; attackers can reach systems behind it","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 61 days old, so current versions are being attacked. Ready-made attack tools are public. It affects a product that faces the internet or gives remote access. The severity score is critical (10.0).","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-83548","CVE-2026-83549"],"vendor":"SonicWall","product":"SMA1000 Appliances","affectedProducts":[{"vendorKey":"sonicwall","productKey":"sma1000appliances","vendor":"SonicWall","product":"SMA1000 Appliances","slug":"sonicwall/sma1000appliances","kind":"direct","evidence":["kev"]}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.","cvss":10,"epss":0.09889,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-09-02","kevDueDate":"2026-09-05","firstSeenAt":"2026-09-02T00:00:00.000Z","updatedAt":"2026-11-01T21:37:40.840Z","newestEvidenceAt":"2026-10-24T23:23:07.997Z"}]}]}