SonicWall GMS Flaws Unpatched After End of Life
ID: deb1dca4-f862-525b-a2e4-1cfe5300bd05
STIX ID: report--deb1dca4-f862-525b-a2e4-1cfe5300bd05
Feed Name: SOCRadar Blog
Threat Score
SonicWall disclosed two vulnerabilities in GMS 9.5.2 and earlier — a critical unauthenticated file-read (CVE-2026-109593, CVSS 9.1) and a medium SQL injection requiring high privileges (CVE-2026-109594) — and stated no fixes will be released because the product is end-of-life; organizations are advised to migrate to NSM and apply mitigations such as removing internet exposure, auditing privileged accounts, rotating stored secrets, and monitoring logs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.