SonicWall CVE-2026-19868: Why SAML-Enforced MFA Wasn't Actually Enforced
SonicWall CVE-2026-19868 let attackers skip SAML-enforced MFA on SonicOS SSL-VPN logins entirely. The firmware fix is out, but the real risk is every login that happened before anyone patched.















