#33 · Cybersecurity · Security · IsosLinuxNews
SonicWall alerts about a new vulnerability in its SSL-VPN firewalls that allows bypassing SAML multi-factor authentication
SonicWall alerts about a vulnerability in its SSL-VPN firewalls that allows bypassing SAML multi-factor authentication, which could facilitate unauthorized access. The company has released security updates to fix the vulnerability and six other flaws in SonicOS.
SonicWall has warned about a new vulnerability in its SSL-VPN firewalls that allows bypassing multi-factor authentication (MFA) via SAML, which could facilitate unauthorized access to systems. The vulnerability, identified as CVE-2026-19868, affects devices running SonicOS configured to use SAML and has a CVSS severity score of 7.1.
The company has released security updates to fix seven vulnerabilities, including this one, and has recommended that customers install the latest versions of SonicOS. CISA has confirmed that the vulnerability has been exploited in the real-world environment and has included CVE-2026-19868 in its catalog of known vulnerabilities.
In addition to the main vulnerability, six other flaws have been fixed in SonicOS, including two errors in the management interface with a severity of 8.8 that allow unauthenticated attackers to perform unauthorized operations under specific conditions.
Written automatically with AI.
Key points
Several vulnerabilities have been fixed in SonicOS, including CVE-2026-19868, which allows bypassing SAML multi-factor authentication. Also resolved were errors in the management interface and buffer overflow issues in SSL-VPN and TACACS+ services, as well as a weak password hash vulnerability in virtual devices.
Who is it for?
The target audience are system administrators and end users who use SonicOS devices configured to use SAML authentication, especially those who have been affected by the exploitation of this vulnerability.
Our recommendation
Editorial suggestion: It is recommended that SonicWall users review available security updates and install them as soon as possible to mitigate the risks associated with the reported vulnerability.
IsosLinux