# SonicWall patches exploited VPN authentication bypass; CISA sets deadline

_Published Saturday, November 7, 2026 at 12:06 AM EST · Security · Latest · Tier 2 — Notable_

![SonicWall patches exploited VPN authentication bypass; CISA sets deadline — Primary](https://www.bleepstatic.com/content/hl-images/2025/05/08/SonicWall.jpg)

SonicWall released updates for seven SonicOS firewall vulnerabilities, including an exploited flaw that can bypass SAML authentication controls and potentially their enforced multifactor authentication. BleepingComputer reported that CISA added the flaw, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog and ordered federal civilian executive branch agencies to secure affected systems by November 20, 2026.

The bypass affects SSL-VPN services configured for SAML authentication and requires valid credentials for an alternate authentication method. The vulnerabilities affect Gen7 versions 7.3.3-7015 and earlier and Gen8 versions 8.2.2-8015 and earlier. Fixed releases are 7.3.4-7013 and 8.2.3-8015; SonicWall says no workarounds are available.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/)

---
Canonical: https://techandbusiness.org/newswire/BlGHj9_zxXTT7f2VVrI55d
Published: 2026-11-07T05:06:33.417Z
Story chronology: 2026-11-07T00:00:55.000Z
Retrieved: 2026-11-08T06:09:33.125Z
Publisher: Tech & Business (techandbusiness.org)