SonicWall patches SonicOS vulnerability enabling VPN login bypass through SAML

SonicWall patched authentication-enforcement vulnerability CVE-2026-19868 in the SonicOS SSL VPN service. The flaw may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication and SAML-enforced multifactor authentication. SonicWall reported potential exploitation, and CISA added the vulnerability to its KEV catalog, but details of the suspected attacks have not been disclosed.