Critical · 1 source · latest 2h

SonicWall will not patch two end-of-life GMS flaws, including a critical unauthenticated file read

CRITICAL · VULNERABILITYSonicWallredteam/daily · 1 source

Severity: Critical
Highest CVSS: 9.1
Exploited: Not known
Sources: 1

What happened

SonicWall has warned about two security weaknesses in an old management system called Global Management System (GMS) that has reached end of life. The company says it will not fix them, so anyone still running these versions remains exposed.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Identify any SonicWall GMS systems running version 9.5.2 or earlier.
Plan to replace end-of-life GMS deployments, as SonicWall will not release patches for these flaws.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-109593CVSS 9.1An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Full story timeline · 2 updates

Tue 3 November17:17CVE-2026-109593 published, CVSS 9.1NVD
Wed 4 November17:00SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database RecordsThe Hacker News

Who reported · 1 outlet

The Hacker News

Who and what is in it

Companies

SonicWall

Support usRedTeamDaily has no paywall. Readers like you keep security news free for everyone.