CVE-2026-109593

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

CVSS

—

EPSS

—

CISA KEV

Not listed

Exploitation

none

Public exploits

None seen

State

PUBLISHED

Coverage

• 

  The Hacker News◇Specialist. Specialist publisher: established trade press, or expert analysis with a track record2 hours ago

  SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

  SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below - CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file…

  ↗thehackernews.com/2026/11/sonicwall-wont-patch-…(opens the publisher's site in a new tab)

What we observed