{
  "aliases": "CVE-2026-19868\nGHSA-mq8w-j7h6-7q9w\n",
  "cvss": 7.5,
  "datePublished": "Nov 6, 2026, 7:03:00 PM",
  "dateUpdated": "Nov 6, 2026, 8:58:23 PM",
  "description": "An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).",
  "euvdId": "EUVD-2026-118429",
  "exploitedSince": "Nov 6, 2026, 12:00:00 AM",
  "id": "CVE-2026-19868",
  "kev_catalogs": [
    "euvd"
  ],
  "severity": "HIGH",
  "source": "euvd_kev",
  "title": "EUVD-2026-118429"
}