SonicWall SSLVPN Flaw CVE-2026-19868 Lets Valid Credentials Skip SAML MFA, and CISA Says It Is Exploited
A user with credentials for an alternate auth method can bypass SAML and its MFA on SonicOS Gen7 and Gen8 SSL VPN. CISA added it to KEV on 6 November with a 20 November deadline.
· 3 min