CVE-2026-19868 Sonicwall Sonicos
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor…
- CVSS
- 7.5 High
- EPSS
- 0.5%
- Percentile
- 46
- Published
- 2026-11-06
- Force
- 9 of 12
- Public PoC
- 2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
On CISA’s exploited list
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
- Added
- 2026-11-06
- Federal patch deadline
- 2026-11-20
- Ransomware use
- not known