CybersecurityUpdated November 7

SonicWall fixes an exploited SonicOS login bypass.

The words “MFA bypass” can sound like a master key, but this one has a condition. CVE-2026-19868 can let an attacker get past SAML checks, including multifactor authentication enforced through SAML, if they already have credentials for a different login method. That isn't a credential-free way in; the alternate credentials are the catch. SonicWall released SonicOS updates to fix seven vulnerabilities, including this SSL-VPN authentication flaw. It has already been exploited in attacks, so this isn't just a theoretical gap in the login flow.

2 publishers2 reports

Coverage started November 7