SonicWall SSLVPN flaw reaches CISA’s exploited list
CISA has added a SonicWall SonicOS SSLVPN vulnerability, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog. The issue affects authentication enforcement in SonicOS SSLVPN and can let users with valid alternate credentials bypass SAML controls, with possible bypass of multi-factor authentication through that login path. CISA listed the vulnerability on November 6, 2026, and set a November 20 remediation deadline. Its entry says ransomware use is unknown and does not call…