SonicWall Warns of SonicOS Flaw Allowing SAML MFA Bypass in SSL-VPN
SonicWall has issued a security advisory for a vulnerability in its SonicOS operating system that powers the company's firewalls. The flaw, tracked as CVE-2026-19868, enables attackers who already possess valid SSL-VPN credentials to circumvent SAML authentication controls and the multi-factor authentication enforced by SAML. The company released patches to address the issue and stated it investigated a report indicating possible exploitation. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also confirmed active abuse of the vulnerability. No technical details about the attacks or their timeline have been disclosed. SonicWall urges customers to apply the updates immediately due to the associated risks.
Security.NLNov 7, 2026Translated from NL