SonicWall is investigating reported exploitation of a SonicOS flaw that lets alternate credentials skip SAML and its enforced multifactor authentication.