SonicOS (Gen7 <= 7.3.3-7015) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/sonicos-gen7--7.3.3-7015/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 02:58:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSonicWall SonicOS SSLVPN: SAML authentication bypass (CVE-2026-19868)https://feed.craftedsignal.io/briefs/2026-11-sonicwall-sslvpn-bypass/Sat, 07 Nov 2026 02:58:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-sonicwall-sslvpn-bypass/SonicWall SonicOS SSLVPN is vulnerable to a single-factor authentication flaw that may allow users with valid credentials for an alternate authentication method to bypass SAML authentication and SAML-enforced MFA.<p>SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability (CVE-2026-19868). This vulnerability may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls and SAML-enforced multi-factor authentication (MFA). Stakeholders are advised to apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.</p> mediumadvisory