Vulnerability in SonicWall Global Management System (GMS)

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.1

[ Description ]Official description

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

[ Fixes ]Fixes and patches

• Security bulletin: SonicWall SNWLID-2026-0019Vendor patch or bulletin · CERT-FR · psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019, cited by CERT-FR CERTFR-2026-AVI-1456

[ Advisories ]Government CERT advisories

• CERT-FR4 Nov 2026CERTFR-2026-AVI-1456

  Multiple vulnerabilities in SonicWall products Translated from French

  Multiple vulnerabilities have been discovered in SonicWall products. They allow an attacker to cause a breach of data confidentiality and SQL injection (SQLi).

  CVE-2026-109594CVE-2026-109593

[ In the news ]News stories naming CVE-2026-109593

• The Hacker News4 Nov 2026, 17:00 UTC

  SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

  CVE-2026-109593

[ References ]References

• psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019