CVE-2026-19868

Vendor

SonicWall

Product

SonicOS SSLVPN

CISA KEV

added 6 Nov 2026, due 20 Nov 2026 (14d)

Weakness

CWE-308

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 90
   KEV NVD 2h ago

   SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

   SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful…

   KEV · due 20 Nov 2026 Fix available CVE-2026-19868 SonicWall
2. 80
   CISA alert CISA 9h ago

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This…

   Exploited CVE-2026-19868 SonicWall