CVE-2026-19868 · Infrastructure
NO FIX YET
SonicWall SonicOS SSLVPN, the VPN service on SonicWall firewalls, can let a user who holds valid credentials for an alternate authentication method skip SAML login controls. A successful attack may also bypass SAML-enforced multi-factor authentication.
first public Nov 6, 2026 · 1 posts · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Organizations that run SonicWall firewalls with the SonicOS SSLVPN service and rely on SAML or SAML-enforced MFA for VPN logins. Sites that do not use SSLVPN, or that use only non-SAML authentication, are likely not exposed; the sources do not confirm this.
Not affected if no-saml, sslvpn-disabled
Who cares saml, sonicos, sonicwall, sslvpn, vpn
unknown if the sources do not give the check)No fix yet, per the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.