Security · 7 November 2026
SonicWall patches SSL‑VPN MFA bypass (CVE‑2026‑19868) after reported exploitation
SonicWall released updates fixing seven SonicOS vulnerabilities, including CVE‑2026‑19868 which lets attackers with valid alternate credentials bypass SAML‑enforced MFA on SSL‑VPN; the company warned of exploitation and CISA added the CVE to its database.
Why it matters
CVE‑2026‑19868 lets attackers bypass SAML MFA on SonicWall SSL‑VPN; prioritize patch rollout to meet security advisory.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 7 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.