Security AlertHigh
SonicWall patches exploited VPN login bypass flaw
Nov 7, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
SonicWall says an SSL VPN flaw in SonicOS has been exploited and has issued fixes. The issue can bypass SAML checks, including SAML-enforced MFA.
Key points
- CVE-2026-19868 affects SonicOS SSL VPN when SAML login is enabled.
- SonicWall says the flaw may have been exploited in attacks.
- CISA added it to the Known Exploited Vulnerabilities catalog on November 6.
Why it matters
If your business uses SonicWall firewalls for remote access, this could weaken VPN logins. Updating quickly helps reduce the risk of unauthorised access to internal systems.
Who’s affected: SonicWall firewalls using affected SonicOS versions
What to do
- Upgrade SonicOS to 7.3.4-7013 or 8.2.3-8015.
- Review VPN and SAML login settings.
- Check your firewalls against CISA's KEV guidance.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.