Vulnerability in SonicWall Global Management System (GMS)

[ Description ]Official description

Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.

[ Fixes ]Fixes and patches

• Security bulletin: SonicWall SNWLID-2026-0019Vendor patch or bulletin · CERT-FR · psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019, cited by CERT-FR CERTFR-2026-AVI-1456

[ Advisories ]Government CERT advisories

• CERT-FR4 Nov 2026CERTFR-2026-AVI-1456

  Multiple vulnerabilities in SonicWall products Translated from French

  Multiple vulnerabilities have been discovered in SonicWall products. They allow an attacker to cause a breach of data confidentiality and SQL injection (SQLi).

  CVE-2026-109594CVE-2026-109593

[ References ]References

• psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019