Use of Single-factor Authentication Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 6 Nov 2026.
0.62%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-19868. Nothing runs until you send it.
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
You are affected if
The fix