CVE-2026-109593

CriticalCVSS 9.1

Published: 03/11/2026(UTC)Translated: 03/11/2026(UTC)NVD NIST

Summary

An unauthenticated attacker with network access to SonicWall GMS 9.5.2 and earlier may be able to read internal GMS files, potentially exposing sensitive information.

Risk Assessment

Exposure of internal files could lead to leakage of configuration data, credentials, or other sensitive information.

Recommendation

Upgrade SonicWall GMS to a version later than 9.5.2 and restrict network access to the GMS interface.

Other vulnerabilities in SonicWall GMS

CVE-2026-109594Medium
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.

Original NVD description (English source)

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS