CVE-2026-19868

Name of the Vulnerable Software and Affected Versions SonicOS Gen7 versions prior to 7.3.4-7013 SonicOS Gen8 versions prior to 8.2.3-8015

Description An authentication enforcement issue in the SonicOS SSLVPN service allows a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. This flaw enables the bypass of multi-factor authentication (MFA) enforced through SAML, effectively reducing the security to single-factor authentication. This issue has been reported as exploited in real-world incidents.

Recommendations Upgrade SonicOS Gen7 to version 7.3.4-7013. Upgrade SonicOS Gen8 to version 8.2.3-8015. Remove unused local accounts that could serve as an alternate authentication method. Restrict SonicOS management interfaces to trusted IP addresses only.