SonicWall
Use of Single-factor Authentication Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 6 Nov 2026.
CVE-2026-19868High7.5
Chance of exploitation in the next 30 days
0.53%
EPSS score from FIRST
Black Shard's team can check your exposure to CVE-2026-19868 and take the fix off your plate.
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
Updated 13 Nov 2026, 11:46 UTC, 31 of 36 sources answering.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.