Security
SonicWall SSL-VPN flaw CVE-2026-19868 lets attackers skip SAML MFA and is already exploited. What to do
SonicWall has patched a SonicOS SSL-VPN bug that lets someone holding valid credentials for another login method bypass SAML authentication, including SAML-enforced MFA. CISA added it to its exploited-vulnerabilities list on November 6, and there is no workaround, so Gen 7 and Gen 8 firewalls using SAML for VPN logins need the new firmware.