CVE-2026-109593 and CVE-2026-109594, SonicWall GMS 9.5.2 and earlier: an unauthenticated network attacker may read internal GMS files (CVSS 3.1 9.1), and SonicWall says the end-of-life product gets no fix and has no workaround
SonicWall GMS 9.5.2 and earlier: unauthenticated file read, no fix will ship; replace with NSM
Defender actions
- Find every SonicWall GMS instance on 9.5.2 or earlier, Virtual Appliance or Windows, cut its reachability from untrusted networks and schedule its replacement with Network Security Manager, because SonicWall will release no fix and names no workaround.
Analysis
SonicWall's advisory SNWLID-2026-0019 of 2026-11-03 covers the end-of-life Global Management System: an unauthenticated attacker with network access to GMS 9.5.2 and earlier may be able to read internal GMS files, potentially exposing sensitive information (CVE-2026-109593, CVSS 3.1 9.1), and a post-authentication SQL injection under specific conditions could let an authenticated attacker access or modify data (CVE-2026-109594, 6.8) (SonicWall, 2026-11-03). The advisory lists no workaround and no fixed version, says no remediation or security update will be released because the product has reached end of life, and strongly encourages migration to Network Security Manager (SonicWall, 2026-11-03). End of support was 2026-09-30 (SonicWall, 2025-05-05), and the previous GMS advisory of 2026-08-11 named 9.5.2 as the fixed build for its flaws, so the last fixed build is itself affected now (SonicWall, 2026-08-11). The advisory does not say which files are exposed or whether anyone exploits the flaw, and CERT-FR relays it (CERT-FR, 2026-11-04).
Cited evidence
The affected product has reached End-of-Life (EOL). As a result, no remediation or security update will be released for these vulnerabilities.
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
Sources4
AI-generated · no human review · this permalink is the shareable record for the finding · verify operationally critical claims against the linked primary source.