Security · High impactFan score 67 · Tier A5 sources

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

Help Net Security · By Zeljka Zorz · 6h ago

The Brief · written from 5 sources

SonicWall released security updates fixing seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass.
The flaw, CVE-2026-19868, lets attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.
CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog; the CVSS score of 7.5 is cited by Security Affairs.

Why it matters

Organisations relying on SAML-enforced MFA for SonicOS SSL-VPN logins may have weaker authentication than they assume, and the flaw is reported as exploited in real attacks.

Who’s affected

Teams running SonicWall SonicOS firewalls with SSL-VPN enabled
Organisations enforcing SAML-based MFA on SonicOS VPN logins

What to do

Apply the SonicWall SonicOS security update that fixes CVE-2026-19868 as soon as possible; Help Net Security reports no workarounds are listed.

CVE-2026-19868
#sonicwall
#vpn
#mfa
#authentication-bypass
#saml
#cisa-kev

SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868…

Read the full story at helpnetsecurity.com ↗