This vulnerability is an authentication enforcement flaw in the SSLVPN service of SonicOS that lets a user with valid credentials for an alternate authentication method bypass SAML authentication controls. The flaw may also allow bypass of SAML‑enforced multi‑factor authentication. CWE-308 indicates a weakness in validating the authenticity and authorization of authentication methods. The impact is unauthorized access to protected resources and compromise of the system’s integrity and confidentiality.

Affects SonicWall SonicOS, specifically the SSLVPN service. No specific version information is provided in the advisory, so any affected product deployed with the vulnerable SSLVPN component may be at risk.

The exploit requires that the attacker obtains valid credentials for an alternate authentication method. The attack can be carried out remotely over the network where the SSLVPN service is exposed. Because SAML authentication and MFA can be bypassed, the severity of the vulnerability is high; however, a CVSS score is not disclosed. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. The lack of publicly disclosed patch details means the risk is mitigated only by applying vendor updates as they become available or by restricting access to the SSLVPN service and enforcing SAML MFA for all users.