SonicWall SonicOS
SonicWall VPN flaw lets credentials for another login method skip SAML and MFA
SonicWall says it investigated a report indicating possible exploitation, and SonicOS 7.3.4-7013 for Gen7 and 8.2.3-8015 for Gen8 firewalls fix it.
Daily Brief
Monday, November 9, 2026
Added to KEV
1 additionSource: CISA’s Known Exploited Vulnerabilities catalog, version 2026.11.06
Vulnerabilities and patches
2 items- Exploited
OpenSSH long-password login flaw on musl Linux is now exploited, Previdian says
Previdian’s sensors logged 20 attempts from 13 IP addresses from Nov 6 to Nov 8, and OpenSSH 10.6p2 and Alpine Linux’s updated packages fix it.
Further readingPrevidian research, further reading on OpenSSH long-password login flaw on musl Linux is now exploited, Previdian says OpenSSH release notes, further reading on OpenSSH long-password login flaw on musl Linux is now exploited, Previdian says Alpine Linux advisory, further reading on OpenSSH long-password login flaw on musl Linux is now exploited, Previdian says
Amazon Web Services Amazon Aurora PostgreSQL and Babelfish for PostgreSQL
Aurora PostgreSQL Babelfish flaw may let attackers run commands without a login
It affects clusters with Babelfish turned on, which accepts SQL Server connections on the TDS port, and AWS lists a fixed Aurora PostgreSQL version for each release.
Coming up
2 itemsMicrosoft .NET and Windows
Windows 11 Enterprise 23H2 and .NET 8 and 9 reach end of support on Nov 10
Microsoft releases no more security updates for either after that date, and its .NET policy lists .NET 10 as supported until Nov 14, 2028.
Adobe ColdFusion
Adobe ColdFusion 2021 reaches the end of extended support on Nov 10
It has had no security patches since core support ended Nov 10, 2025, Adobe says, and Adobe points customers to ColdFusion 2025.