CVE-2026-19868

CVE-2026-19868: SonicWall SSLVPN SAML and MFA Bypass on CISA KEV

SonicWall SSLVPN SAML and MFA Bypass Added to CISA KEV (CVE-2026-19868)

Cybersecsloth Editorial3 days ago05 mins

If SAML is on for SonicWall SSLVPN and a user still has another way to log in, CVE-2026-19868 may skip your SAML and MFA. On KEV since Nov 6. Upgrade to 7.3.4-7013 or 8.2.3-8015.

Read Full News

Able2Shell: N-able Takes N-central Offline After 30+ Zero-Days Go Public, No CVE or Hotfix Yet

IBM Aspera Faspex 5 User-to-Admin Privilege Escalation Added to CISA KEV (CVE-2026-123218)

“yes, and don’t ask again”: Claude Code saved the password, GitHub got a copy, and a bot closed the bug report

no, you did not win three months of Grok Heavy and a SpaceX share. you won an MFA-bypassing phish.

Iris Plaza says a cloud service held data on 7.7 million people, and someone else may have it now

your PBX takes orders by text message: hunting FreeSWITCH CVE-2026-116779 before someone else does

GPUStack gave admin to anything that looked like localhost. behind a same-host proxy, everything does (CVE-2026-102895, on KEV)

a security researcher’s AI agent walked out of the sandbox and into WorkOS

OpenAI says GPT-6 Cyber found 81 Firefox bugs and 948 Linux paths to root. the model is not public.

that free PlayStation card is a survey mill, and CTM360 counted more than a thousand of them

SonicWall SSLVPN SAML and MFA Bypass Added to CISA KEV (CVE-2026-19868)