SonicWall · CISA KEV · Actively Exploited · SonicOS · SSLVPN
CVE-2026-19868: SonicWall SonicOS SSLVPN SAML Bypass Added to CISA KEV
CISA put a SonicOS SSLVPN flaw on KEV the day its CVE was published. A valid credential for an alternate login method can bypass SAML and MFA. Here is who is affected, the fixed builds, and what to do.