https://pwn.watch/i/sonicwall-sonicos-sslvpn-saml-bypass-cve-2026-19868 SonicWall published SNWLID-2026-0014 covering multiple SonicOS flaws. Primary tracked here: CVE-2026-19868, a use-of-single-factor-authentication issue in the SonicOS SSLVPN service that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls and SAML-enforced MFA (CWE-308). CISA added it to the KEV catalog on 2026-11-06 (due 2026-11-20; ransomware use Unknown). NVD (published 2026-11-06T19:17:48Z by PSIRT@sonicwall.com) lists Gen7 SonicOS 7.3.3-7015 and older and Gen8 8.2.2-8015 and older as affected; no CVSS in NVD yet. Same advisory also covers sibling SonicOS CVEs CVE-2026-82308 (pre-auth SSL-VPN heap overflow DoS), CVE-2026-107154 / CVE-2026-107155 (management interface), CVE-2026-19703 (weak password hashing on virtual appliances), and CVE-2026-77708 / CVE-2026-77709 (pre-auth TACACS+ buffer overflows). Confirm fixed builds on the vendor advisory. en Fri, 06 Nov 2026 00:00:00 GMT https://pwn.watch/i/sonicwall-sonicos-sslvpn-saml-bypass-cve-2026-19868 https://pwn.watch/i/sonicwall-sonicos-sslvpn-saml-bypass-cve-2026-19868#2026-11-06-215a91a9 Fri, 06 Nov 2026 00:00:00 GMT high <p><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014">Source</a></p> https://pwn.watch/i/sonicwall-sonicos-sslvpn-saml-bypass-cve-2026-19868 https://pwn.watch/i/sonicwall-sonicos-sslvpn-saml-bypass-cve-2026-19868#2026-11-06-1cda3ec6 Fri, 06 Nov 2026 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>