EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-118429

Severity: HIGH Base Score: 7.5 CVSS Version: 3.1

Vulnerability Description

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

▪ Attack Vector (AV): Network

▪ Attack Complexity (AC): High

▪ Privileges Required (PR): None

▪ User Interaction (UI): None

▪ Scope (S): Changed

▪ Confidentiality Impact (C): High

▪ Integrity Impact (I): Low

▪ Availability Impact (A): None

Affected Vendors & Systems

Vendor SonicWall

References & Advisory Links

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

sonicwall

EPSS Probability

0.62

Known Aliases

CVE-2026-19868 GHSA-mq8w-j7h6-7q9w

Published On

2026-11-06

Last Updated

2026-11-07

Exploited Since

2026-11-06