Skip to content
Sign in
CVE-2026-19868Not scored

CVE-2026-19868: SonicWall SonicOS SSLVPN vulnerability

SonicWall · SonicOS SSLVPN

Vendor fix available · Affected: SonicWall SonicOS SSLVPN · Exploitation: in CISA KEV since 6 Nov

Action brief

Patch

Evidence

KEV status

In CISA KEV since 6 Nov; federal deadline 20 Nov.

Why this CVE

CISA added it to KEV on 6 Nov. Briefs cover CVEs that CISA added to its Known Exploited Vulnerabilities catalogue in the last 30 days, or that at least 5 outlets covered within 72 hours.

No written summary yet. The sections above come straight from stored records.

ExploitationIn CISA KEV

  1. In CISA KEVCISA KEV catalogue6 Nov
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not established: not seen

No EPSS score yet. The score appears once FIRST publishes it.

Not scored yet. NVD has not published a CVSS score.

Federal deadline

CISA KEV · added 6 Nov · catalogue entry

14d3h5mleft

First in our coverage 6 Nov (CISA), the day CISA added it to KEV.

NowAdded to CISA KEV6 Nov · cisa.govFirst in our coverage6 Nov · CISAFederal deadlineFri 20 Nov, 23:59 UTC
  • In CISA KEV
  • Remediation window
  • Article

DescriptionNVD

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

What changed

  1. CISA added it to the KEV catalogue CISA

Coverage2 articles · 2 outlets

One row per outlet, in order of first report. First in our coverage: CISA, 6 Nov.

Full timeline
Developinglatest 7 minutes ago2 articles2 outlets
6 Nov · CISA firstNow
  • Fri 6 Nov, 20:30 UTC. CISA, first report. CISA Adds Exploited SonicWall SonicOS Flaw to KEV Catalogue. Cites a CVE in CISA KEV.
  • Fri 6 Nov, 20:47 UTC. cybersixt, its first report on the story. SonicWall SSL VPN flaw exploited to bypass SAML and MFA logins. Cites a CVE in CISA KEV.
All coveragerunning total2CISA1cybersixt1Now
  • First report
  • Article
  • Official notice
  • Running total

Added to CISA KEV

Show as table
2 articles about CVE-2026-19868 from 2 outlets
Published (UTC)OutletHeadline
6 Nov 20:30CISACISA Adds Exploited SonicWall SonicOS Flaw to KEV Catalogue
6 Nov 20:47cybersixtSonicWall SSL VPN flaw exploited to bypass SAML and MFA logins
  1. SonicWall SSL VPN flaw exploited to bypass SAML and MFA logins
    cybersixt
  2. CISA Adds Exploited SonicWall SonicOS Flaw to KEV Catalogue
    CISA · official notice · first in our coverage

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in