HackerFeeds

CyberSecurity News

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

SecurityWeek
· November 7, 2026
Vulnerabilities

AI summary

A vulnerability in SonicOS, identified as CVE-2026-19868, has been patched by SonicWall. This flaw allows attackers with credentials for a different login method to bypass SAML checks, including those that enforce multi-factor authentication. The vulnerability can be exploited by attackers to weaken VPN logins. SonicWall has issued a patch to address this issue. The vulnerability's exploitation can lead to unauthorized access.

Vulnerabilities mentioned

CVE-2026-19868
HIGH
CVSS 7.5
CISA KEV

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

Read the full article at SecurityWeekwww.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.