On SonicWall SonicOS SSL-VPN, a user with valid credentials for another login method can get past SAML-enforced MFA. That is CVE-2026-19868, now in CISA KEV. Patch, then review the accounts that have those credentials first.
hify.ai/radar/en/cisa-confir…
XLab says the CWPdoor backdoor receives commands through forged HTTP requests that stay out of access logs. Running Control Web Panel on Linux? Check the origin and integrity of its web server.
hify.ai/radar/en/hackers-bac…
