SonicWall GMS Flaws Expose Files, Alter Data Without Patches
Two critical vulnerabilities in SonicWall's end-of-life Global Management System expose internal files and allow database alterations. No patches will be released.
TL;DR
- SonicWall GMS versions 9.5.2 and earlier contain two serious vulnerabilities.
- CVE-2026-109593 allows unauthenticated attackers to read internal system files.
- Another flaw enables unauthorized changes to database records.
- Both issues affect end-of-life products with no planned fixes.
- Organizations should migrate off affected systems immediately.
SonicWall has disclosed two high-severity vulnerabilities affecting its Global Management System (GMS), a centralized network management solution. The flaws impact all versions up to 9.5.2 and pose significant risks to organizations still using these legacy systems.
Because the affected versions have reached end-of-life status, SonicWall has announced that no patches will be developed. This leaves users exposed to potential attacks that could lead to sensitive data exposure and unauthorized system modifications.
Vulnerability Details
- CVE-2026-109593 carries a CVSS score of 9.1 (critical) and allows unauthenticated file reading from internal GMS systems.
- The second vulnerability enables attackers to modify database records without authentication.
- Both flaws can be exploited by remote attackers with network access to the GMS interface.
- No authentication is required to exploit either vulnerability, increasing the risk profile significantly.
Impact and Recommendations
- Organizations using SonicWall GMS 9.5.2 or older versions should urgently assess their exposure.
- Since no patches are forthcoming, migration to supported SonicWall management solutions is essential.
- Network administrators should restrict access to GMS interfaces and monitor for unusual activity.
- Security teams should validate whether these systems are present in their environment during their next asset inventory review.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.