CVE-2026-19868
HIGH CISA KEV 2 PoCs
ACT NOW
Priority: 0.04
BB Relevance:
75/100
Published: 2026-11-06
Modified: 2026-11-09
First seen: 2026-11-06
Status: active
Attack Surface
Network
No Auth
No Interaction
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Changed
C:
High
I:
Low
A:
None
Description
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
CISA Known Exploited Vulnerability
Vendor / Product
SonicWall — SonicOS SSLVPN
Date Added
2026-11-06
Remediation Due
2026-11-20
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19868
Weakness Classification (1)
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| SonicWall | SonicOS | 7.3.3-7015 and older versions |
| SonicWall | SonicOS | 8.2.2-8015 and older versions |
| SonicWall | SonicOS | 7.3.3-7015 and older versions |
| SonicWall | SonicOS | 8.2.2-8015 and older versions |
| SonicWall | SonicOS | 7.3.3-7015 and older versions |
| SonicWall | SonicOS | 8.2.2-8015 and older versions |
| SonicWall | SonicOS | 7.3.3-7015 and older versions |
| SonicWall | SonicOS | 8.2.2-8015 and older versions |
| sonicwall | sonicos | < 7.3.4-7015 |