CVE-2026-19703: Security vulnerability

Published Nov 6, 2026

Updated

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings.

Event History

Nov 6, 2026

CVE Published

via MITRE·07:09 PM

Data Sourced

via MITRE·07:09 PM

DescriptionWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access is required before this issue can be exploited?

An attacker must already have local access to the SonicOS virtual appliance. The available information does not identify a remote or unauthenticated exploitation path.

What could an attacker gain by disclosing the affected credential?

The disclosed platform credential provides access only to a limited subset of platform settings.

CVE-2026-19703: Security vulnerability

Event History

Frequently Asked Questions

What level of access is required before this issue can be exploited?

What could an attacker gain by disclosing the affected credential?

Company

Resources

Contact

Frequently Asked Questions

What level of access is required before this issue can be exploited?

What could an attacker gain by disclosing the affected credential?