Security · High impactFan score 67 · Tier A3 sources

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

SecurityWeek · By Eduard Kovacs · 4h ago

The Brief · written from 3 sources

SonicWall released security updates fixing seven vulnerabilities in SonicOS firewalls.
CVE-2026-19868 is an SSL-VPN authentication bypass that lets attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.
CVE-2026-19868 has a CVSS score of 7.5 and is listed in CISA's Known Exploited Vulnerabilities catalog.

Why it matters

SonicOS SSL-VPN is often exposed to the internet, and this flaw weakens MFA-protected VPN logins for organisations that rely on SAML. Since the flaw is already exploited, unpatched firewalls are at active risk.

Who’s affected

Organisations running SonicWall SonicOS firewalls with SSL-VPN
Teams relying on SAML-enforced MFA for VPN access

What to do

Apply the SonicOS security updates from SonicWall that fix CVE-2026-19868 and the other six flaws.
Review VPN login logs for signs of SAML or MFA bypass activity.

CVE-2026-19868
#sonicwall
#sonicos
#vpn
#vulnerability
#mfa
#cisa

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA. The post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek .

Read the full story at securityweek.com ↗