CISA Adds One Known Exploited Vulnerability to Catalog

A critical vulnerability in SonicWall SonicOS SSLVPN, tied to weaknesses in single-factor authentication, is being actively exploited in the wild, prompting CISA to add it to its Known Exploited Vulnerabilities Catalog. The flaw highlights the persistent risk of leaving internet-facing network appliances unpatched, particularly those handling remote access where exploitation can provide attackers with direct entry into enterprise networks. Federal agencies are now mandated under BOD 26-04 to remediate the issue on a risk-prioritized timeline, underscoring how regulatory pressure is increasingly required to drive timely patching. This incident matters because SSLVPN gateways are high-value targets — a successful exploit can bypass perimeter defenses entirely, granting attackers privileged network footholds.