Vulnerability
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
CVSS score (v3.1)9.1Critical
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- Last updated by NVD
- First covered by RedTeamDaily
Coverage
SonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read
SonicWall has warned of two vulnerabilities in end-of-life GMS systems and says it will not release patches. The affected versions are GMS 9.5.2 and earlier. CVE-2026-109593 (CVSS 9.1) is an unauthenticated file read flaw that lets a network-adjacent attacker read internal GMS files, and the second flaw reportedly allows database records to be altered.
Sources: NVD and CISA known exploited vulnerabilities catalogue.