CVE-2026-19868 is an authentication enforcement vulnerability in the SonicOS SSLVPN service. It allows a user with valid credentials for an alternate authentication method to bypass SAML authentication controls, including SAML-enforced multi-factor authentication (MFA). This could lead to unauthorized access with high confidentiality impact but limited integrity impact. The vulnerability has a CVSS score of 7.5, indicating high severity.