CVE-2026-19868
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
| CWE | CWE-308 |
| Vendor | sonicwall |
| Product | sonicos |
| Published | Nov 6, 2026 |
| Last Updated | Nov 7, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for sonicwall sonicos
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-19868.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / SonicOS
7.3.3-7015 and older versions 8.2.2-8015 and older versions