CISA flags SonicOS flaw that can bypass SAML-enforced MFA
Image: Primary CISA has added SonicWall SonicOS vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog following reports of possible exploitation. SonicWall says the SSL-VPN flaw can let a user with valid credentials for an alternate authentication method bypass SAML authentication controls, potentially including SAML-enforced multi-factor authentication.
SonicWall urged customers to update after investigating a report of potential exploitation. Federal Civilian Executive Branch agencies are recommended to apply patches by November 20, 2026. The company did not disclose further details about the suspected attack or who was behind it.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
