A vulnerability in SonicWall SonicOS SSLVPN allows attackers with credentials from a different login method to bypass SAML checks, including SAML-enforced MFA. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether SonicWall SonicOS SSLVPN is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 2Vendor statement missing. no VendorResearcher coverage missing. no Researcher2 signals
Only official coverage so far. Treat as an early signal.
