CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

A critical vulnerability in SonicWall SonicOS (CVE-2026-19868) allows attackers to bypass SAML-based authentication and MFA using alternate credential paths, undermining a core layer of identity defence. The flaw reached CISA's Known Exploited Vulnerabilities catalog, meaning real-world threat actors are likely already taking advantage of unpatched systems. This incident illustrates that MFA alone is not a silver bullet — when the underlying authentication framework contains logic flaws, all downstream security controls built on top of it can be circumvented. Organisations relying on perimeter VPN/firewall appliances must treat vendor-issued critical patches with the same urgency as a live incident.