A detailed explainer is available in Japanese.
Read the Japanese explainer
Exploited
High
7.5
SonicOS SSLVPNでSAML認証を回避、悪用を確認
CVE-2026-19868
First seen on SecPulse
Summary
SonicWallのSonicOSでSSLVPNを使い、SAML認証を設定している組織は要注意です。多要素認証まで回避される脆弱性が実際の攻撃で悪用されており、該当版の確認と告知に沿った対処が必要です。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
SonicWallのSonicOSでSSLVPNを使い、SAML認証を設定している組織は要注意です。多要素認証まで回避される脆弱性が実際の攻撃で悪用されており、該当版の確認と告知に沿った対処が必要です。
Original description The description as published by the source.
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
References
- advisory NVD
- web PSIRT@sonicwall.com
- web cisa.gov