Cybersecsloth: CVE-2026-19868 defensive checks (SonicOS SSLVPN SAML / MFA bypass)
LAB-ONLY / DEFENSIVE USE. These scripts read files you export yourself. They make no
network connections, do not touch any firewall, and contain no exploit code.

sonicos-19868-build-check.py  flags inventory builds below the fixed floors
                              (Gen7 7.3.4-7013, Gen8 8.2.3-8015) and whether SAML is on for SSLVPN.
sslvpn-auth-review.py         lists successful SSLVPN logins with no matching SAML IdP sign-in.

Fix: upgrade SonicOS. SonicWall lists no workaround (SNWLID-2026-0014, Nov 6, 2026).
