by Kastro
Paper/Archive/CVE-2026-109593

CVE-2026-109593

SonicWall Global Management System (GMS) — An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, p…

CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Affected

ProductAffectedFixed inSource
Global Management System (GMS)9.5.2 and earlier versions–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019