SonicWall patches an SSLVPN flaw that lets a stolen password skip SAML and its MFA

On November 6, 2026, SonicWall published advisory SNWLID-2026-0014 to fix CVE-2026-19868, an authentication-enforcement flaw in the SonicOS SSLVPN service that lets valid credentials for an alternate method bypass SAML and the MFA it enforces. Added to CISA’s KEV catalog the same day for active exploitation, it must be remediated by November 20, 2026 on Gen7 and Gen8 firewalls.