{"id":"CVE-2026-109593","kind":"vulnerability","aliases":["CVE-2026-109593"],"related":[],"title":"SonicWall GMS: unauthenticated network attacker can read internal files","description":"An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.","summary":"SonicWall GMS 9.5.2 and earlier may let an unauthenticated attacker on the network read internal GMS files. Those files can expose sensitive information.","severity":"critical","cvss":9.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"SonicWall GMS","fixed":[],"affected":"<= 9.5.2","ecosystem":"vendor"}],"ecosystems":[],"tags":["discontinued","infrastructure","network-management","sonicwall-gms"],"not_affected_if":[],"how_to_check":"Check the installed GMS version (Virtual Appliance or Windows) in the admin console and compare it against 9.5.2 (NVD says 9.5.2 and earlier). Note GMS was retired in October 2025 and support was scheduled to end 2026-09-30, so a fixed build may not exist. Restrict network access to the GMS management interface to trusted admin hosts until SonicWall publishes an advisory.","fix":null,"status":"open","published_at":"2026-11-03T17:17:53+00:00","first_seen_at":"2026-11-03T17:21:54+00:00","triaged_at":"2026-11-03T17:23:55+00:00","updated_at":"2026-11-03T17:24:57+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T17:23:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"SonicWall GMS: unauthenticated network attacker can read internal files","impact":"medium","summary":"SonicWall GMS 9.5.2 and earlier may let an unauthenticated attacker on the network read internal GMS files. Those files can expose sensitive information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["sonicwall-gms","network-management"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Internal GMS files read without login, exposing sensitive data","analyst_note":"Check the NVD entry and SonicWall advisory for the fixed version and affected-interface details; sources give no fix.","how_to_check":"- Check the installed GMS version in the admin console or on the server, and compare it against `9.5.2`.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running SonicWall GMS 9.5.2 or earlier that expose the GMS service to the network. The sources do not say which configurations or interfaces are required. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000625,"input_tokens":4090,"output_tokens":433,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the NVD entry and SonicWall advisory for the fixed version and affected-interface details; sources give no fix.","search":"'-109593':12A,15A '-2026':11A,14A '9.5.2':28B,59C 'abl':65C 'access':54C 'attack':5A,35B,51C 'cve':10A,13A 'discontinu':18B 'earlier':30B,61C 'expos':46B,72C 'file':9A,42B,44B,70C 'gms':2A,17A,25B,27B,41B,58C,69C 'inform':48B,74C 'infrastructur':19B 'intern':8A,40B,68C 'let':32B 'manag':22B 'may':31B,63C 'network':4A,21B,38B,53C 'network-manag':20B 'potenti':71C 'read':7A,39B,67C 'sensit':47B,73C 'sonicwal':1A,24B,26B,57C 'sonicwall':16A 'sonicwall-gm':23B 'unauthent':3A,34B,50C 'version':62C","nicknames":[],"mitigations":[],"who_affected":"Organizations running SonicWall GMS (Virtual Appliance or Windows) 9.5.2 or earlier, per the NVD entry, where an attacker can reach the GMS service over the network without logging in. The NVD text does not say which interface or port is involved. Teams that have already moved off GMS, or whose GMS is reachable only from a locked-down admin network, are at lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["gms","sonicwallgms"],"ptokens":["gms","sonicwall"],"labels":["critical","discontinued","infrastructure","networkmanagement","sonicwallgms"],"first_public_at":"2026-11-03T17:17:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109593","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109593","severity":null,"published_at":"2026-11-03T17:17:53+00:00","modified_at":"2026-11-03T17:17:53+00:00","first_seen_at":"2026-11-03T17:21:54+00:00","fetched_at":"2026-11-03T17:21:54+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-109593:1510","url":null,"severity":null,"published_at":"2026-11-03T17:24:57+00:00","modified_at":"2026-11-03T17:24:57+00:00","first_seen_at":"2026-11-03T17:24:57+00:00","fetched_at":"2026-11-03T17:24:57+00:00","note":"No SonicWall advisory found for this CVE; only the NVD entry (page not retrievable). The August advisory SNWLID-2026-0011 covers different CVEs (66145 etc.), GMS 9.5.1 and earlier, fixed in 9.5.2, which conflicts with 'fixed in 9.5.2' so no fix is known for this one. Nothing verified; X not checked. Revisit when SonicWall PSIRT lists it."}],"documents":[{"id":59269,"url":"https://www.sonicwall.com/support/notices/product-notice-sonicwall-gms-security-affected-by-multiple-vulnerabilities/kA1VN000001yVDF0A2","title":"SonicWall GMS SNWLID-2026-0011 (August, different CVEs)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}