CISA added the SonicWall SonicOS MFA bypass, CVE-2026-19868, to the Known Exploited Vulnerabilities catalog. SonicWall said it investigated a report of potential real-world exploitation. On the SSL-VPN, a valid login for a non-SAML method can skip SAML controls and the MFA those controls enforce, which is the path many teams use to reach a website admin panel.
