SonicWall Gen6 SSL-VPN CVE-2024-12802 — Akira-linked actors brute-force MFA via UPN vs SAM account-name split Feb-Mar 2026; firmware update insufficient without 6-step LDAP reconfig; Gen6 EoL 2026-04-16
cve · item:sonicwall-gen6-sslvpn-cve-2024-12802-mfa-bypass-akira-feb-ma
Coverage timeline
1
first 2026-05-21 → last 2026-05-21
Briefs
1
1 distinct
Sources cited
6
5 hosts
Sections touched
1
active_threats
Co-occurring entities
0
no co-occurrence
Story timeline
- 2026-05-21CTI Daily Brief — 2026-05-21
Where this entity is cited
- active_threats1
Source distribution
- attack.mitre.org2 (33%)
- bleepingcomputer.com1 (17%)
- comparitech.com1 (17%)
- cybermaxx.com1 (17%)
- cybersecuritydive.com1 (17%)
External references
All cited sources (6)
- cybersecuritydive.comprimaryinlineCybersecurity Dive, 2026-05-20https://www.cybersecuritydive.com/news/patch-bypass-hackers-exploit-flaw-sonicwall/820600/
- attack.mitre.orginlineT1021.001 Remote Services: Remote Desktop Protocolhttps://attack.mitre.org/techniques/T1021/001/
- attack.mitre.orginlineT1047 Windows Management Instrumentationhttps://attack.mitre.org/techniques/T1047/
- bleepingcomputer.cominlineBleepingComputer, 2026-05-20https://www.bleepingcomputer.com/news/security/hackers-bypass-sonicwall-vpn-mfa-due-to-incomplete-patching/
- comparitech.cominlineComparitech Q1 2026 Healthcare, 2026-04-29https://www.comparitech.com/news/healthcare-ransomware-roundup-q1-2026-stats-on-attacks-ransoms-and-data-breaches/
- cybermaxx.cominlineCyberMaxx Q1 2026https://www.cybermaxx.com/resources/ransomware-research-report-q1-2026-audio-blog-interview/
Items in briefs about SonicWall Gen6 SSL-VPN CVE-2024-12802 — Akira-linked actors brute-force MFA via UPN vs SAM account-name split Feb-Mar 2026; firmware update insufficient without 6-step LDAP reconfig; Gen6 EoL 2026-04-16
No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.