Skip to content
Sign in
7.5 High

CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Ransomware campaigns Not observed so far
Weakness CWE-308

Description

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
High
Privileges required
None
Interaction
None
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None

Affected products and versions

Product Affected versions Fixed in
SonicOS Versions not published

Other CVEs of SonicOS

The 75 CVEs of SonicOS →
CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Medium CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Medium CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Medium CVE-2026-82308 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service,… 7.5 High
Track this CVE