SonicWall SonicOS MFA Bypass: Patch and Review

By Editorial Team | November 10, 2026
SonicWall SonicOS MFA bypass CVE-2026-19868: SSL-VPN SAML login flaw, fixed firmware 7.3.4-7013 and 8.2.3-8015, November 2026

A SonicWall SonicOS MFA bypass is now on CISA’s list of exploited vulnerabilities. CVE-2026-19868 lets someone who holds valid credentials for an alternate sign-in method skip SAML on the SSL-VPN, and with it the multi-factor step. SonicWall published fixed firmware on November 6. As of November 9, its advisory also lists a workaround for anyone…

Read More

SonicWall SMA1000 SSRF Vulnerability: Third Max Flaw

By Editorial Team | October 14, 2026
SonicWall SMA1000 SSRF vulnerability is the third max-severity flaw in three months. Attempts are reported; patch to 12.4.3-03670 or 12.5.0-03082.

A third maximum-severity flaw in three months has been fixed in SonicWall’s SMA1000 remote-access appliances, and this SonicWall SMA1000 SSRF vulnerability may already be under attack. SonicWall’s October advisory describes an unauthenticated server-side request forgery rated CVSS 10.0. A security firm says its honeypots saw exploitation attempts, while SonicWall says it has no evidence of…

Read More