CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Published Nov 6, 2026

Updated

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

Affected Software

1 affected component

SonicWall SonicOS SSLVPN

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Compensating control
Discontinue use of the SonicWall SonicOS SSLVPN product if mitigations are unavailable.

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs valid credentials for an alternate authentication method. Those credentials may be used to bypass SAML authentication controls, including SAML-enforced MFA.

Who is exposed to this vulnerability?

SonicWall SonicOS SSLVPN deployments that use SAML authentication controls and have an alternate authentication method with valid user credentials may be exposed. The provided information does not identify affected versions or configuration defaults.

CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Affected Software

Remediation

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Who is exposed to this vulnerability?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Who is exposed to this vulnerability?