Security · High impactFan score 67 · Tier A3 sources
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
Security Affairs · By Pierluigi Paganini ·
The Brief · written from 3 sources
- SonicWall released security updates fixing seven vulnerabilities in SonicOS firewalls.
- CVE-2026-19868 is an SSL-VPN authentication bypass that lets attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.
- CVE-2026-19868 has a CVSS score of 7.5 and is listed in CISA's Known Exploited Vulnerabilities catalog.
Why it matters
SonicOS SSL-VPN is often exposed to the internet, and this flaw weakens MFA-protected VPN logins for organisations that rely on SAML. Since the flaw is already exploited, unpatched firewalls are at active risk.
Who’s affected
- Organisations running SonicWall SonicOS firewalls with SSL-VPN
- Teams relying on SAML-enforced MFA for VPN access
What to do
- Apply the SonicOS security updates from SonicWall that fix CVE-2026-19868 and the other six flaws.
- Review VPN login logs for signs of SAML or MFA bypass activity.
- CVE-2026-19868
- #sonicwall
- #sonicos
- #vpn
- #vulnerability
- #mfa
- #cisa
U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SonicOS SSLVPN flaw, tracked as CVE-2026-19868 (CVSS score of 7.5), to its Known…
Timeline
SonicWall releases security updates fixing seven SonicOS flaws, including CVE-2026-19868
CISA adds CVE-2026-19868 to its Known Exploited Vulnerabilities catalog
BleepingComputer
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
Security Affairs
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
SecurityWeek
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins