Vulnerability
Published 2026-11-06
Verified 2026-10-24
SonicWall SonicOS SSLVPN (CVE-2026-19868)
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability. SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA). Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- SonicWall SonicOS SSLVPN
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-19868
