Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-19868

SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

7.5
CVSS 3.1
1
story
NOV 6
added to KEV
Severity
7.5 High · vendor score
Vendor
SonicWall
Product
SonicOS SSLVPN
Published
Nov 6, 2026
Added to KEV
Nov 6, 2026
KEV deadline
Nov 20, 2026
Ransomware use
Unknown
Weakness
CWE-308

What it is

SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesSonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)SonicWall warns that attackers are exploiting a high-severity SonicOS SSL VPN authentication bypass flaw (CVE-2026-19868) that can circumvent SAML-enforced MFA.LINDSEY O'DONNELL-WELCH · 1 MIN

Official references

3 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline