Critical · 1 source · latest 2h

SonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read

CRITICAL · VULNERABILITYSonicWallredteam/daily · 1 source

Severity: Critical
Highest CVSS: 9.1
Exploited: Not known
Sources: 1

What happened

SonicWall has warned of two vulnerabilities in end-of-life GMS systems and says it will not release patches. The affected versions are GMS 9.5.2 and earlier. CVE-2026-109593 (CVSS 9.1) is an unauthenticated file read flaw that lets a network-adjacent attacker read internal GMS files, and the second flaw reportedly allows database records to be altered.

For IT people · Written by AI from 1 source · Wrong?

What to do

Identify any SonicWall GMS systems running version 9.5.2 or earlier.
Plan to replace end-of-life GMS deployments, as SonicWall will not release patches for these flaws.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-109593CVSS 9.1An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Full story timeline · 2 updates

Tue 3 November17:17CVE-2026-109593 published, CVSS 9.1NVD
Wed 4 November17:00SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database RecordsThe Hacker News

Who reported · 1 outlet

The Hacker News

Who and what is in it

Companies

SonicWall

Support usRedTeamDaily has no paywall. Readers like you keep security news free for everyone.