SonicWall warns of possible exploitation of SSLVPN flaw that bypasses MFA
VULNERABILITYSonicWallredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
CVE-2026-19868 (CVSS 7.1) in SonicOS SSLVPN lets an attacker holding valid credentials for an alternate authentication method bypass SAML authentication and SAML-enforced MFA, only when SAML is enabled for logins. SonicWall is investigating a report of potential exploitation. The 6 November advisory also lists CVE-2026-82308, a pre-authentication heap overflow in SSLVPN (7.5). Affected: Gen7 SonicOS 7.3.3-7015 and earlier, and Gen8 8.2.2-8015 and earlier, including NSv. Fixes are 7.3.4-7013 (Gen7) and 8.2.3-8015 (Gen8). No workaround is listed.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Upgrade affected SonicOS appliances to the fixed release for their generation: 7.3.4-7013 or later for Gen7, or 8.2.3-8015 or later for Gen8.
- Confirm which appliance generation you run before choosing the matching fixed release.
- Review which authentication methods are enabled on SSLVPN and check whether SAML is in use.
- Check VPN login activity for anything unusual while completing the upgrade.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies
Products