SonicWall SSL-VPN Vulnerability Exploited to Bypass MFA

A critical SonicWall SSL-VPN vulnerability, CVE-2026-19868, has been actively exploited, allowing attackers with valid credentials to bypass SAML-enforced multi-factor authentication. This flaw in SonicOS, now added to CISA's Known Exploited Vulnerabilities catalog, enables unauthorized access by circumventing security controls when SAML is active for SSL-VPN logins. Users are urged to apply the patch.