SonicWall Unpatches Critical Vulnerabilities in End-of-Life GMS Systems

SonicWall has identified two unpatched vulnerabilities in end-of-life GMS systems, including a critical file read flaw (CVE-2026-109593, CVSS 9.1) that allows network-based attackers to access internal files and modify database records.

SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.

Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below -

CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files,

Read original article