SonicWall · SonicOS SSLVPN
CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
这是什么
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
CISA: SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
该怎么做
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
美国联邦机构的修复期限：2026年11月20日
SonicWall 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年9月2日 | Server-Side Request Forgery | SMA1000 Appliances | 严重 10.0 | 8.0% |
| 2026年9月2日 | OS Command Injection | SMA1000 Appliances | 高 7.8 | 9.9% |
| 2026年7月14日 | Server-Side Request Forgery | SMA1000 Appliances | 严重 10.0 | 6.8% |
| 2026年7月14日 | Code Injection | SMA1000 Appliances | 高 7.2 | 12% |
| 2025年12月17日 | SMA1000 Missing Authorization | SMA1000 appliance | 中 6.6 | 2.8% |
| 2025年5月1日 | OS Command Injection | SMA100 Appliances | 高 7.2 | 76% |
| 2025年4月16日 | OS Command Injection | SMA100 Appliances | 中 6.5 | 4.4% |
| 2025年2月18日 | SSLVPN Improper Authentication | SonicOS | 高 8.2 | 95% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。