CISA adds SonicWall SSLVPN flaw to KEV catalog
Original title: U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
CISA adds CVE-2026-19868 authentication bypass to KEV catalog.
U.S. CISA added a SonicWall SonicOS SSLVPN flaw, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog. The flaw is an authentication enforcement vulnerability that may allow users with valid credentials for an alternate authentication method to bypass SAML controls. SonicWall PSIRT is investigating a report of possible exploitation. CISA orders federal agencies to address the flaw by November 20, 2026.
Unconfirmed: SonicWall investigating possible exploitation
- CVSS score of 7.5
- Bypasses SAML-enforced multi-factor authentication
- Requires valid credentials for alternative method
- SonicWall strongly recommends latest update
Impact: bypass of SAML MFA with valid credentials
- 1.upgrade to latest SonicOS release
- 2.address CVE-2026-19868 per CISA BOD 22-01
- CVEs
- CVE-2026-19868
- Vendors
- SonicWall
- Products
- SonicOS
- Organizations
- CISA
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19868 | SAML bypass in SonicWall SonicOS SSLVPN | 7.5 | <1% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
U. S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.