CISA Flags Sonic Wall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
Summary: CISA added CVE-2026-19868, a high-severity SonicWall SonicOS flaw scored 7.1/7.5, to its Known Exploited Vulnerabilities catalog after reports it may have been exploited in real-world attacks. SonicWall said the SSL-VPN authentication enforcement flaw lets a user with valid credentials for an alternate authentication method bypass SAML authentication controls and SAML-enforced MFA, and it urged customers to update to the latest version; FCEB agencies are recommended to patch by November 20, 2026.
Key Takeaway: The bypass works through an alternate authentication path, so an attacker holding valid credentials for that method gets past SAML and the MFA tied to it, and SonicWall has not disclosed who is behind the reported exploitation.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-109593CVE-2026-109594CVE-2026-19868
- Related
- CISA Adds One Known Exploited Vulnerability to Catalog Cyber Risks · Nov 06, 2026CVE-2026-19868: Sonic Wall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability Known Exploited Vulnerabilities · Nov 06, 2026