SonicWall has released security updates for seven vulnerabilities in SonicOS firewall software, including CVE-2026-19868, an authentication-enforcement flaw in the SSLVPN service that can let users with valid credentials for an alternate authentication method bypass SAML authentication controls and potentially SAML-enforced multi-factor authentication (MFA). The weakness affects SSLVPN logins configured to use SAML, according to the company’s security advisory SNWLID-2026-0014.
SonicWall said it investigated a report indicating potential exploitation of the flaw and urged customers to install the latest release. The U.S. Cybersecurity and Infrastructure Security Agency added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog on November 6, confirming that attackers have exploited it in the wild. CISA set November 20 as the remediation deadline for federal civilian agencies.
The vulnerability affects SonicOS Gen 7 versions 7.3.3-7015 and earlier, along with Gen 8 versions 8.2.2-8015 and earlier. SonicWall lists version 7.3.4-7013 as the fixed release for Gen 7 firewalls and 8.2.3-8015 for Gen 8 devices. The vendor says no workaround is available.
The issue is tracked as CVE-2026-19868 and carries a high-severity rating. SonicWall has not published technical details about the reported attacks. Its advisory also addresses six other SonicOS vulnerabilities in the same update.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
