{"id":"CVE-2026-19868","url":"https://compromised.live/t/CVE-2026-19868","kind":"exploited_vuln","tier":1,"severity":"high","title":"SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability","summary":"An attacker with valid credentials for an alternate login method can bypass SAML sign-in controls and even skip SAML-enforced multi-factor authentication, and this flaw is being actively exploited. SonicWall SonicOS SSLVPN. Apply the vendor's update now and check for signs of compromise, such as unexpected VPN logins.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-11-06","due_date":"2026-11-20","ransomware":false},"first_seen":"2026-11-06T20:10:45.779Z","updated_at":"2026-11-06T20:10:45.779Z","campaign":null,"status":"active","details":"SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).","aliases":["CVE-2026-19868"],"sources":[{"name":"kev","id":"CVE-2026-19868","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19868"}]}