SonicWall SSL-VPN flaw CVE-2026-19868 can bypass SAML MFA
SonicWall calls exploitation only potential; Gen7 through 7.3.3-7015 and Gen8 through 8.2.2-8015 need firmware, with no workaround.
74
Vulnerability1 · 1 read
CVE-2026-77709
Pre-auth heap overflow DoS in SonicOS TACACS+ client
- CVSS 3.1
- 5.9 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A heap-based buffer overflow in the SonicOS TACACS+ authentication client can, under specific conditions, be triggered before authentication. A remote unauthenticated attacker can reach it over the network with no user interaction. Successful use causes an application-level denial of service only; confidentiality and integrity are not affected. SonicWall has not listed affected builds.
What to do: SonicWall has not listed a fixed version or workaround for CVE-2026-77709.
| Product | Affected |
|---|---|
| SonicWall SonicOS TACACS+ authentication client | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.
- Weakness
- CWE-122
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H