CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

CISA has added a high-severity vulnerability in SonicWall SonicOS to its list of known exploited vulnerabilities due to reports of possible exploitation in real-world attacks. The vulnerability is related to authentication reinforcement and has a CVSS score of 7.1 or 7.5. It is tracked as CVE-2026-19868. This move by CISA indicates that the flaw may have been actively exploited by attackers. The vulnerability allows for a bypass of multi-factor authentication. CISA's action suggests that the vulnerability is being taken seriously due to its potential impact.