{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/sonicos-sslvpn/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sonicwall:sonicos_sslvpn:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-19868"},{"id":"CVE-2026-82308"},{"id":"CVE-2026-107154"},{"id":"CVE-2026-107155"},{"id":"CVE-2026-19703"},{"id":"CVE-2026-77708"},{"id":"CVE-2026-77709"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["SonicOS SSLVPN","SonicOS (Gen7 \u003c= 7.3.3-7015)","SonicOS (Gen8 \u003c= 8.2.2-8015)","SonicOS (Gen7 TZ, NSa, NSsp, NSv \u003c= 7.3.3-7015)","SonicOS (Gen8 TZ, NSa, NSv \u003c= 8.2.2-8015)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["SonicWall"],"content_html":"\u003cp\u003eSonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability (CVE-2026-19868). This vulnerability may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls and SAML-enforced multi-factor authentication (MFA). Stakeholders are advised to apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.\u003c/p\u003e\n","date_modified":"2026-11-07T11:53:59Z","date_published":"2026-11-07T02:58:42Z","id":"https://feed.craftedsignal.io/briefs/2026-11-sonicwall-sslvpn-bypass/","summary":"SonicWall SonicOS SSLVPN is vulnerable to a single-factor authentication flaw that may allow users with valid credentials for an alternate authentication method to bypass SAML authentication and SAML-enforced MFA.","title":"SonicWall SonicOS SSLVPN: SAML authentication bypass (CVE-2026-19868)","url":"https://feed.craftedsignal.io/briefs/2026-11-sonicwall-sslvpn-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - SonicOS SSLVPN","version":"https://jsonfeed.org/version/1.1"}