SonicWall SonicOS SSLVPN flaw exploited to bypass SAML and MFA via CVE-2026-19868
SonicWall's SonicOS SSLVPN service is vulnerable to CVE-2026-19868, which allows attackers to bypass SAML and multi-factor authentication. CISA added this flaw to its Known Exploited Vulnerabilities catalog on November 6, 2026, following evidence of active exploitation. Update your firmware immediately.
CVE-2026-198681 min