Critical SonicWall Vulnerability Allows Hackers to Bypass MFA
The company urges immediate action as hackers actively exploit the flaw.
New Security Threat in SonicWall Systems
SonicWall, a leader in network security, has identified seven critical vulnerabilities within its firewall software. The most severe is CVE-2026-19868, which allows attackers to bypass SAML-based multi-factor authentication (MFA). This flaw is already being actively exploited in real-world cyberattacks, leading the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to add it to its Known Exploited Vulnerabilities catalog.
What Risks Do Users Face?
The issue primarily affects systems where SSL-VPN services are configured with SAML authentication. If an attacker has access to an alternative authentication method, they can bypass system security entirely to infiltrate corporate networks. While SonicWall has not disclosed specific details regarding the attacks, the company’s security team confirmed that the vulnerability has already been exploited against real-world targets.
The patch bundle also addresses six additional flaws, including two high-risk interface vulnerabilities rated at 8.8, which allow unauthorized attackers to perform operations without authentication. Furthermore, buffer overflow issues were identified in SSL-VPN and TACACS+ services, which could lead to a Denial-of-Service (DoS).
How to Protect Your Systems
SonicWall has released software updates to address these vulnerabilities. The patches are available for SonicOS Gen7 (version 7.3.4-7013) and Gen8 (version 8.2.3-8015) systems. According to the company, there is no alternative workaround or temporary fix; installing the official update is mandatory.
This incident serves as a reminder to the business sector regarding the importance of continuous monitoring and maintenance of network devices. In recent months, SonicWall products, particularly the SMA1000 series, have become frequent targets for hackers. Organizations using SonicWall firewalls should immediately check their system versions and ensure they are updated to prevent potential data breaches or unauthorized network access.