SonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read
CRITICAL · VULNERABILITYSonicWallredteam/daily · 1 source
- Severity
- Critical
- Highest CVSS
- 9.1
- Exploited
- Not known
- Sources
- 1
What happened
SonicWall has said it will not patch two vulnerabilities in end-of-life Global Management System (GMS) releases, 9.5.2 and earlier. CVE-2026-109593 (CVSS 9.1) is an unauthenticated file read flaw that lets an attacker with network access read internal GMS files. The article title says the second flaw can alter database records, but the details are truncated in the source. Defenders should identify any GMS 9.5.2 or earlier deployments and plan replacement, since no fix is coming.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Identify any SonicWall GMS systems running version 9.5.2 or earlier.
- Plan to replace end-of-life GMS deployments, as SonicWall will not release patches for these flaws.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
The Hacker News
Who and what is in it
Companies