{"id":"CVE-2026-19868","published":"2026-11-06T19:17:48.437","lastModified":"2026-11-09T19:42:13.887","description":"An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-308"],"vendors":["sonicwall"],"products":["sonicos","nsv 270","nsv 470","nsv 870","nsa 2700","nsa 3700","nsa 4700","nsa 5700","nsa 6700","nssp 10700","nssp 11700","nssp 13700"],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19868","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":null}