---
title: SonicWall Warns of Actively Exploited SSLVPN Flaw That Can Bypass MFA
description: Attackers with credentials for another login method can skip SonicWall VPN sign-on checks, including multifactor prompts. A fix is out.
canonical_url: https://codekeeper.co/ticker/sonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa
---

[Vulnerabilities](https://codekeeper.co/ticker/tag/vulnerabilities) | [Cyberattacks](https://codekeeper.co/ticker/tag/cyberattacks)

# SonicWall Warns of Actively Exploited SSLVPN Flaw That Can Bypass MFA

Attackers with credentials for another login method can skip SonicWall VPN sign-on checks, including multifactor prompts. A fix is out.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Nov 9, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

SonicWall has patched CVE-2026-19868, a SonicOS SSLVPN flaw that lets an attacker holding valid credentials for another login method get past SAML authentication, skipping any multifactor authentication (MFA) that SAML enforces. It only affects SSLVPN with SAML sign-in enabled. Rated CVSS 7.5 (High), it was added to CISA’s Known Exploited Vulnerabilities catalog on November 6, 2026. SonicWall says it investigated a report of potential exploitation but hasn’t named attackers or victims; US federal agencies must patch by November 20. Fixes are in SonicOS 7.3.4-7013 and later for Gen7 and 8.2.3-8015 and later for Gen8, covering hardware and NSv appliances on 7.3.3-7015, 8.2.2-8015, and earlier. No workaround exists. Source: [Cyber Security News](https://cybersecuritynews.com/sonicos-sslvpn-vulnerability-exploited/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fsonicwall-warns-of-actively-exploited-sslvpn-flaw-that-can-bypass-mfa%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Vulnerabilities CISA Gives Agencies Three Days to Patch Exploited WordPress Flaw Nov 5, 2026](https://codekeeper.co/ticker/cisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw)

[Cyberattacks Bitter Spy Group Rewrites Malware in Rust for South Asia Attacks Nov 3, 2026](https://codekeeper.co/ticker/south-asian-cyber-espionage-group-bitter-targets-with-upgraded-malware)

[Cyberattacks TightVNC Viewer Flaw Runs Attacker Code Ahead of VNC Login Nov 2, 2026](https://codekeeper.co/ticker/tightvnc-code-execution-vulnerability-update-now)

[Cyberattacks Rogue Claude Code Extension Tried SSH Backdoor on Cursor Users Nov 2, 2026](https://codekeeper.co/ticker/fake-claude-code-extensions-vs-code)