CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability. SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
- CISA KEV-listed (remediation due 2026-11-20)
- EPSS 0.6% (50.0% percentile)
- CVSS 7.5 high