SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

SonicWall has released fixes for a SonicOS flaw, tracked as CVE-2026-19868, that lets attackers with valid credentials for one login method sidestep SAML-based authentication and its associated multi-factor protections on the SSL VPN service. The vendor confirmed it is investigating a report suggesting the bug, rated 7.1 on the CVSS scale, has already been abused in the wild, and CISA added it to its Known Exploited Vulnerabilities list the same day, giving federal agencies until November 20 to apply the fix. The issue hits Gen7 TZ, NSa, NSsp and NSv devices running SonicOS 7.3.3-7015 or earlier, as well as Gen8 TZ, NSa and NSv devices on 8.2.2-8015 or earlier, and is resolved only by upgrading to SonicOS 7.3.4-7013 or 8.2.3-8015, since no workaround exists. SonicWall's same advisory also discloses six other unrelated flaws, including two high-severity management-interface bugs and several buffer overflow and weak-hashing issues, none of which are reported as exploited.