Another firewall VPN flaw is already in attackers’ hands — and on CISA’s must-patch list.
On November 6, 2026, BleepingComputer reported that SonicWall released updates for seven SonicOS firewall vulnerabilities, including an SSL-VPN authentication bypass exploited in attacks. The issue, CVE-2026-19868, scored CVSS 7.1 and affects SonicOS SSL-VPN services configured to use SAML authentication.
What the bypass does
Attackers with valid credentials for an alternate authentication method can bypass SAML authentication controls, potentially including SAML-enforced multi-factor authentication. Ryan Harris of The Electronic Office discovered and reported the flaw. SonicWall PSIRT said it investigated a report of potential exploitation and urged customers to upgrade immediately.
CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog and ordered federal civilian executive branch agencies to secure affected systems by November 20, 2026.
Other fixes and version notes
The advisory also addresses six additional SonicOS issues, including two management-interface flaws rated 8.8 that can let unauthenticated attackers perform unauthorized operations under specific conditions, pre-authentication buffer overflows in SSL-VPN and TACACS+ that can cause denial of service, and weak password hashing on virtual appliances.
Affected releases include SonicOS Gen7 7.3.3-7015 and earlier and Gen8 8.2.2-8015 and earlier. Fixes ship in 7.3.4-7013 and 8.2.3-8015; SonicWall says no workarounds are available. The warning follows a string of SMA1000 remote-access attacks earlier in 2026.
Why it matters
SAML MFA on VPN is only as strong as the alternate auth paths around it. Firewall and MSSP sellers should lead with emergency patch messaging and MFA architecture reviews.
B2B security marketers can turn this into timely outreach for SonicWall-heavy mid-market accounts — patch SLAs, KEV deadlines and MFA gap assessments convert when fear is specific.
Source: BleepingComputer. Written by the xRapid Media LLP team.
About xRapid Media
xRapid Media LLP is a High Tech B2B Marketing company for technology businesses: software and SaaS companies, IT services and managed service providers, and hardware and IT product vendors. Our team combines positioning and content, account-based marketing, paid ads funnels, verified B2B data, intent signals, email and LinkedIn outreach and appointment setting to help you reach the right buyers and turn their attention into qualified leads and meetings.
Want help putting ideas like these into practice? Email [email protected] or book a time with our team.