Skip to content
Multiple Vulnerabilities in SonicWall SSL-VPN and HPE Morpheus Software

Multiple Vulnerabilities in SonicWall SSL-VPN and HPE Morpheus Software

First seen 9 Nov 2026, 21:40 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 21:41 UTC
  • •CVE-2026-19868 is actively exploited and has been added to CISA's KEV catalog.
  • •SonicWall's vulnerabilities affect multiple versions of SonicOS, with critical attack vectors identified.
  • •CVE-2026-95778 in HPE Morpheus Software allows remote code execution and requires immediate patching.

SonicWall has reported seven vulnerabilities in its SonicOS platforms, including CVE-2026-19868, which is actively exploited and added to CISA's KEV catalog. Affected versions include Gen7 prior to 7.3.3-7015 and Gen8 prior to 8.2.2-8015. The vulnerabilities allow for various attack vectors, including server-side request forgery and buffer overflows, potentially enabling unauthorized access and denial of service. Additionally, a new vulnerability, CVE-2026-95778, has been disclosed for HPE Morpheus Software, which allows for remote code execution. This vulnerability was published on November 9, 2026, and has a CVSS score of 8.8. Organizations are urged to apply patches and review security advisories to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 12h ago How this analysis works

Timeline

2026-11-06
CVE-2026-19868 published
SonicWall disclosed CVE-2026-19868, a vulnerability in SonicOS, with a CVSS score of 7.5.
Digital.Nhs.Uk
2026-11-06
CVE-2026-19868 added to CISA KEV
CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities Catalog due to active exploitation.
Digital.Nhs.Uk
2026-11-07
First public PoC for CVE-2026-19868
A proof-of-concept for CVE-2026-19868 was made publicly available.
Digital.Nhs.Uk
2026-11-09
CVE-2026-95778 published
HPE Morpheus Software vulnerability CVE-2026-95778 was disclosed, allowing remote code execution.
Cvefeed

More articles in this cluster (5)

Following this threat?

Track CVE-2026-107154 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (21)

1 / 3

Common questions

Which SonicWall versions are affected?
Gen7 versions prior to 7.3.3-7015 and Gen8 versions prior to 8.2.2-8015 are affected.
Is CVE-2026-95778 being exploited?
CVE-2026-95778 has been published today, and its exploitation status is currently unknown.
What should organizations do now?
Organizations should apply the latest patches for SonicWall and HPE Morpheus Software as soon as possible.