SonicWall
CompanySecurity timeline
- Vulnerability reported by The Hacker NewsSonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read
- Vulnerability reported by BleepingComputerSonicWall warns of unpatched flaws in end-of-life GMS software
Recent news
SonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read
SonicWall has warned of two vulnerabilities in end-of-life GMS systems and says it will not release patches. The affected versions are GMS 9.5.2 and earlier. CVE-2026-109593 (CVSS 9.1) is an unauthenticated file read flaw that lets a network-adjacent attacker read internal GMS files, and the second flaw reportedly allows database records to be altered.
SonicWall warns of unpatched flaws in end-of-life GMS software
SonicWall has warned customers of two security flaws in end-of-life Global Management System (GMS) software. The company will not release patches for them, so affected organisations cannot rely on a vendor fix.