SonicWall fixes exploited SSL-VPN MFA bypass in SonicOS
SonicWall has released security updates for SonicOS firewalls after a vulnerability in SSL-VPN authentication was reported as exploited in an attack. The flaw affects only SonicOS SSL-VPN services set up to use SAML authentication, and SonicWall says customers should install the latest updates. CVE-2026-19868 and SAML authentication The issue is tracked as CVE-2026-19868. It lets an attacker who already has valid credentials for an alternate authentication method bypass SAML authentication…