SonicOS
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Cyber Security NewsSonicWall warns of possible exploitation of SSLVPN flaw that bypasses MFA
- Vulnerability reported by BleepingComputerSonicWall patches seven SonicOS flaws, including an exploited SSL-VPN auth bypass
- Vulnerability reported by CISA AlertsSonicWall patches exploited SonicOS flaw that weakens VPN logins
Recent news
SonicWall warns of possible exploitation of SSLVPN flaw that bypasses MFA
SonicWall has urged customers to patch CVE-2026-19868 (CVSS 7.1), a SonicOS SSLVPN flaw that can let an attacker with valid credentials for an alternate authentication method bypass SAML checks and MFA when SAML is enabled. The company is investigating a report of potential in-the-wild exploitation. The flaw is one of seven in the advisory published 6 November, which also includes a pre-authentication heap overflow in SSLVPN.
SonicWall patches seven SonicOS flaws, including an exploited SSL-VPN auth bypass
SonicWall has released updates fixing seven vulnerabilities in SonicOS firewalls. One is an SSL-VPN authentication bypass flaw, which allows MFA to be bypassed, and it is already being exploited in attacks. Administrators running SonicOS with SSL-VPN should apply the updates promptly.
SonicWall patches exploited SonicOS flaw that weakens VPN logins
SonicWall has patched CVE-2026-19868, a SonicOS vulnerability that is being exploited and weakens VPN authentication. An attacker holding valid credentials for an alternative login method can bypass SAML checks, including SAML-enforced MFA. Administrators should apply the vendor patch to SonicOS devices as a priority.