cve-2026-19868
HIGH CVSS 7.5 unknown
Description
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
Timeline
- Published
- Nov 6, 2026, 7:03:00 PM
- Last Modified
- Nov 6, 2026, 8:58:23 PM
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"aliases": "CVE-2026-19868\nGHSA-mq8w-j7h6-7q9w\n",
"cvss": 7.5,
"datePublished": "Nov 6, 2026, 7:03:00 PM",
"dateUpdated": "Nov 6, 2026, 8:58:23 PM",
"description": "An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).",
"euvdId": "EUVD-2026-118429",
"exploitedSince": "Nov 6, 2026, 12:00:00 AM",
"id": "CVE-2026-19868",
"kev_catalogs": [
"euvd"
],
"severity": "HIGH",
"source": "euvd_kev",
"title": "EUVD-2026-118429"
}