CVE-2026-19868

7.5 HIGH

Published 2026-11-06 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses

CWE-308

Vendors

sonicwall

Products

sonicos, nsv 270, nsv 470, nsv 870, nsa 2700, nsa 3700, nsa 4700, nsa 5700, nsa 6700, nssp 10700, nssp 11700, nssp 13700

All references

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19868

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-107808PoC
HIGHCVE-2026-111884PoC
MEDIUMCVE-2026-121531PoC
HIGHCVE-2026-57490PoC
MEDIUMCVE-2026-79763PoC
MEDIUMCVE-2026-90862

Related by shared AI tags and CWE weakness class. Browse the full archive.