SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability, tracked as CVE-2026-19868. The flaw may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication.
According to the report, CVE-2026-19868 is an authentication enforcement flaw in the SonicOS SSL-VPN service. It can be exploited only if SAML is enabled for SSL-VPN logins. SonicWall says a user with valid credentials for an alternate authentication method may be able to bypass the MFA requirement.
The report says SonicWall has urged administrators to patch quickly. It also notes that no workarounds are listed.