CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability, CVE-2026-19868, impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, described as an authentication enforcement vulnerability via alternate authentication methods, may allow users with valid credentials to bypass SAML authentication controls, including SAML-enforced multi-factor authentication (MFA). SonicWall has acknowledged potential exploitation in real-world attacks and urged customers to update to the latest version.