SonicWall GMS Flaws Unpatched After End of Life

Reported by SOCRadar (Yağmur Ernalbant)

Summary by Cyber Security News5 Nov 2026, 10:45 CET

About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/sonicwall-gms-flaws-unpatched-after-end-of-life/

SonicWall has disclosed two vulnerabilities in its Global Management System (GMS) and says it will not fix either of them. The more severe flaw, CVE-2026-109593, lets an unauthenticated attacker with network access read internal GMS files. The second, CVE-2026-109594, is a SQL injection that an authenticated attacker can use to access or modify data in the GMS database.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.