CISA flags exploited SonicWall SSL-VPN flaw that can sidestep SAML-enforced MFA
CISA added CVE-2026-19868, a SonicWall SonicOS SSLVPN flaw, to its Known Exploited Vulnerabilities catalog on Nov. 6 based on active exploitation; federal civilian agencies must act by Nov. 20. SecurityWeek reports fixes in 7.3.4-7013 and 8.2.3-8015, no workaround, and that only SAML-enabled SSL-VPN is exposed.

















