SonicWall warns of possible exploitation of SSLVPN flaw that bypasses MFA
VULNERABILITYSonicWallredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
SonicWall has urged customers to patch CVE-2026-19868 (CVSS 7.1), a SonicOS SSLVPN flaw that can let an attacker with valid credentials for an alternate authentication method bypass SAML checks and MFA when SAML is enabled. The company is investigating a report of potential in-the-wild exploitation. The flaw is one of seven in the advisory published 6 November, which also includes a pre-authentication heap overflow in SSLVPN.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Upgrade affected SonicOS appliances to the fixed release for their generation: 7.3.4-7013 or later for Gen7, or 8.2.3-8015 or later for Gen8.
- Confirm which appliance generation you run before choosing the matching fixed release.
- Review which authentication methods are enabled on SSLVPN and check whether SAML is in use.
- Check VPN login activity for anything unusual while completing the upgrade.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies
Products