SonicWall patches seven SonicOS firewall flaws; CISA lists SAML bypass
Original title: SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access
Five of the Gen 7 and Gen 8 bugs allow unauthenticated remote attacks; only CVE-2026-19868 has a workaround.
SonicWall updated an advisory covering seven flaws in Gen 7 and Gen 8 firewalls running SonicOS, five of which allow unauthenticated remote attacks. It warned of potential active exploitation of CVE-2026-19868, a SonicOS SSL VPN flaw that lets holders of other valid credentials skip SAML and its MFA. Analyst Frank Dickson said CISA added that bug to the Known Exploited Vulnerabilities catalog the same day and treats it as active. The other six are not known to be exploited.
Unconfirmed: SonicWall describes exploitation of CVE-2026-19868 as potential, while an analyst says CISA treats the KEV entry as active.
- CVE-2026-107155 and CVE-2026-107154 score 8.8; the SAML bypass scores 7.1.
- CVE-2026-82308 is a pre-authentication SSL-VPN heap overflow scored 7.5.
- Two TACACS+ pre-authentication overflows score 5.9; weak password hashing scores 5.2.
- The only workaround is disabling or deleting LDAP, RADIUS, and TACACS+ servers.
- Three pre-authentication overflows are described as denial of service, not access.
Impact: SAML and MFA bypass using other valid credentials
| Product | Affected |
|---|---|
| SonicWall SonicOS on Gen 7 and Gen 8 firewalls | Gen 7 and Gen 8 |
- 1.Apply SonicWall's patches for the seven SonicOS flaws.
- 2.For CVE-2026-19868, disable or delete active LDAP, RADIUS, and TACACS+ authentication servers.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-107154 | Session validation vulnerability in SonicOS management interface | 8.8 | — | ||
CVE-2026-107155+1 related CVE | Permissive cross-domain policy in SonicOS management interface | 8.8 group max | — | ||
| CVE-2026-19703 | Weak password hashing in SonicOS virtual appliances | 5.1 | — | ||
| CVE-2026-19868 | SAML bypass in SonicWall SonicOS SSLVPN | 7.5 | <1% | KEVPoC | KEV |
CVE-2026-77708+1 related CVE | Pre-auth stack overflow in SonicOS TACACS+ client | 5.9 | — |
From the original article
5 min read at csoonline.com
SonicWall on Monday updated its advisory about seven cybersecurity holes affecting its Gen 7 and Gen 8 firewalls, five of which allow unauthenticated remote attacks, to warn that it is aware of “potential” active exploitation of at least one of the bugs, CVE-2026-19868, a bypass of SAML authentication controls in its SonicOS SSL VPN service.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.