CVE-2026-19868HIGH
SonicWall SonicOS SSLVPN SAML authentication and MFA bypass
SonicOS SSLVPN flaw lets users with alternate-method credentials bypass SAML and SAML-enforced MFA; exploited, fixed in 7.3.4-7013 / 8.2.3-8015.
Updated 2026-11-11
Vendor hub
SonicWall vulnerabilities
Dossiers
Recent CISA KEV entries
| CVE | Product | Added to KEV | Status | Dossier |
|---|---|---|---|---|
| CVE-2026-19868 | SonicWall SonicOS SSLVPN | 2026-11-06 | Active exploitation | Read → |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | Active exploitation | Planned |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | Active exploitation | Planned |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 2026-07-14 | Active exploitation | Planned |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 2026-07-14 | Active exploitation | Planned |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | Active exploitation | Planned |
| CVE-2023-44221 | SonicWall SMA100 Appliances | 2025-05-01 | Active exploitation | Planned |
| CVE-2021-20035 | SonicWall SMA100 Appliances | 2025-04-16 | Active exploitation | Planned |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | Active exploitation | Planned |
| CVE-2025-23006 | SonicWall SMA1000 Appliances | 2025-01-24 | Active exploitation | Planned |
| CVE-2024-40766 | SonicWall SonicOS | 2024-09-09 | Active exploitation | Planned |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | 2022-03-28 | Active exploitation | Planned |
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | Active exploitation | Planned |
| CVE-2020-5135 | SonicWall SonicOS | 2022-03-15 | Active exploitation | Planned |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | Active exploitation | Planned |
| CVE-2021-20021 | SonicWall Email Security | 2021-11-03 | Active exploitation | Planned |
| CVE-2021-20022 | SonicWall Email Security | 2021-11-03 | Active exploitation | Planned |
| CVE-2021-20023 | SonicWall Email Security | 2021-11-03 | Active exploitation | Planned |
| CVE-2019-7481 | SonicWall SMA100 | 2021-11-03 | Active exploitation | Planned |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 2021-11-03 | Active exploitation | Planned |