- Description
- An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
- Source
- PSIRT@sonicwall.com
- NVD status
- Undergoing Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 4.7
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
- Severity
- HIGH
Data from CISA
- Vulnerability name
- SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
- Exploit added on
- Nov 6, 2026
- Exploit action due
- Nov 20, 2026
- Required action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- PSIRT@sonicwall.com
- CWE-308
- Hype score
- Not currently trending
📌CISA: Οι ευπάθειες CVE-2024-27834 της Apple και CVE-2026-19868 του SonicWall SonicOS SSLVPN μπαίνουν στον κατάλογο KEV λόγω ενεργής εκμετάλλευσης - ➡️Διαβάστε εδώ: https://t.co/9Tu15BXMG0
@NemesisGRE
7 Nov 2026
528 Impressions
2 Retweets
10 Likes
0 Bookmarks
1 Reply
0 Quotes
Do you run SonicWall SonicOS SSLVPN? CISA lists CVE-2026-19868 as exploited (added 6 Nov 2026). Can it reach you? Over a network, with no login and no click. CVSS 7.5. Plain-English breakdown: https://t.co/zphNgHxde4 #SonicWall #CyberSecurity #InfoSec #Vulnerability #CVE #KEV
@xploitdigestkev
7 Nov 2026
2 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔒 #CyberSecurity CVE-2026-19868: SonicWall SonicOS SSLVPN SAML MFA Bypass — Active Exploitation,… "On November 6, 2026, CISA added CVE-2026-19868 to the Known Exploited Vulnerabilities…" 🔗 https://t.co/qNsr7ksvWy #CyberSecurity #ThreatIntel #cve202619868 #critical
@SecurityAr58409
7 Nov 2026
49 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
SonicWall SonicOS SSLVPN CVE-2026-19868 Exploited in Wild - https://t.co/kApGeo8KjX
@moton
7 Nov 2026
37 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Alerta 2026-147 | SonicOS SSLVPN: explotación activa, CVE-2026-19868 (CVSS 7.1). Con SAML, credenciales de otro método eluden SAML/MFA. No es RCE ni bypass sin credenciales. Actualiza a Gen7 7.3.4-7013+ y Gen8 8.2.3-8015+ y valida el build. #CVE https://t.co/FBxbls8VhI
@BeaconLabMX
7 Nov 2026
46 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CISA añadió a KEV CVE-2026-19868 (bypass de autenticación SSLVPN en SonicWall SonicOS). Parchea Gen7 ≤7.3.3-7015 y Gen8 ≤8.2.2-8015 antes del 20 nov. #ciberseguridad #kev https://t.co/MPleZaWodk
@l0rdmalware
7 Nov 2026
33 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
おはようございます！ 11/7朝の脆弱性まとめやで。今朝はSonicWallの悪用確認と、OpenSSH「sshole」の悪用続報に注意してな。 1. SonicWall SonicOS SSLVPN（CVE-2026-19868） ・重要度：High（CVSS 7.5）。11/6にCISAの悪用確認済み
@yabetchi_iPhone
6 Nov 2026
71 Impressions
0 Retweets
5 Likes
0 Bookmarks
0 Replies
0 Quotes
🟠 High · Partly patched SonicWall SonicOS SSLVPN: SAML / MFA bypass via alternate auth (CVE-2026-19868, CISA KEV) — SNWLID-2026-0014 batch CVE-2026-82308, CVE-2026-107154, CVE-2026-107155, CVE-2026-19703, CVE-2026-77708, CVE-2026-77709 https://t.co/s3Otmg8HhL
@pwnwatch_app
6 Nov 2026
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes