CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
What is it?
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
Official description from NVD.
What happened
SonicWall SonicOS SSLVPN contains a single-factor authentication flaw allowing users with valid alternate credentials to bypass SAML authentication and MFA controls. The vulnerability is now tracked in CISA's Known Exploited Vulnerabilities catalog. Organizations must apply vendor mitigations or discontinue use of the product per BOD 26-04 guidance. Federal agencies have until November 20, 2026 to patch.
From the Intel60 brief of Nov 6, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalSonicWall SonicOS SSLVPN auth bypass added to CISA KEVNov 6, 2026