# CISA flags SonicOS flaw that can bypass SAML-enforced MFA

_Published Monday, November 9, 2026 at 1:47 AM EST · Security · Latest · Tier 2 — Notable_

![CISA flags SonicOS flaw that can bypass SAML-enforced MFA — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjILYvlBWd-cPdnYJiX5gpFUBvDeq0nZYHWard5V4B8oEx7r_-4lUxcIan0_5l4EHxun-KbEHOJTj1p8qTuORzAaKalwqmlz1ajVuBmS-KTBJB0-rBSrhHGgHUkY0I3GTMSEbIy5fkP4vDyITtkZvbkqreMTACQjDS3OBRmnZE4U7pVZLjgId53L259b5Qj/s1700-nu-rw-lo-l85-e365/sonicss.jpg)

CISA has added SonicWall SonicOS vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog following reports of possible exploitation. SonicWall says the SSL-VPN flaw can let a user with valid credentials for an alternate authentication method bypass SAML authentication controls, potentially including SAML-enforced multi-factor authentication.

SonicWall urged customers to update after investigating a report of potential exploitation. Federal Civilian Executive Branch agencies are recommended to apply patches by November 20, 2026. The company did not disclose further details about the suspected attack or who was behind it.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html)

---
Canonical: https://techandbusiness.org/newswire/T0VcEC8wkFfuQk3YIzjtzK
Published: 2026-11-09T06:47:59.481Z
Story chronology: 2026-11-09T06:05:00.000Z
Retrieved: 2026-11-09T09:02:59.191Z
Publisher: Tech & Business (techandbusiness.org)