Summary

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA. The post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek .

For more information, read the full story at the original source: SecurityWeek ↗

Vulnerabilities in this story

• CVE-2026-19868 KEV · fix by 2026-11-20 SonicWall SonicOS EPSS 0.6% 7.5High

Also reported by

• The Hacker News: CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation ↗
• Help Net Security: Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) ↗
• Security Affairs: U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog ↗