Live › vulnerability › CVE-2026-109593
SonicWall GMS 9.5.2 and earlier may let an unauthenticated attacker on the network read internal GMS files. Those files can expose sensitive information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Organizations running SonicWall GMS (Virtual Appliance or Windows) 9.5.2 or earlier, per the NVD entry, where an attacker can reach the GMS service over the network without logging in. The NVD text does not say which interface or port is involved. Teams that have already moved off GMS, or whose GMS is reachable only from a locked-down admin network, are at lower risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SonicWall GMS | vendor | <= 9.5.2 | – |
9.5.2 (NVD says 9.5.2 and earlier)Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-109593")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.