---
id: "CVE-2026-109593"
kind: "vulnerability"
aliases: ["CVE-2026-109593"]
title: "SonicWall GMS: unauthenticated network attacker can read internal files"
severity: "critical"
cvss: 9.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "SonicWall GMS", "fixed": [], "affected": "<= 9.5.2", "ecosystem": "vendor"}]
ecosystems: []
tags: ["discontinued", "infrastructure", "network-management", "sonicwall-gms"]
not_affected_if: []
published_at: "2026-11-03T17:17:53+00:00"
first_seen_at: "2026-11-03T17:21:54+00:00"
updated_at: "2026-11-03T17:24:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109593", "first_seen_at": "2026-11-03T17:21:54+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-03T17:24:57+00:00"}]
---

# SonicWall GMS: unauthenticated network attacker can read internal files

SonicWall GMS 9.5.2 and earlier may let an unauthenticated attacker on the network read internal GMS files. Those files can expose sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SonicWall GMS affected <= 9.5.2 fixed ?

## How to check

Check the installed GMS version (Virtual Appliance or Windows) in the admin console and compare it against 9.5.2 (NVD says 9.5.2 and earlier). Note GMS was retired in October 2025 and support was scheduled to end 2026-09-30, so a fixed build may not exist. Restrict network access to the GMS management interface to trusted admin hosts until SonicWall publishes an advisory.

## Timeline

- 2026-11-03T17:21:54+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-109593
- 2026-11-03T17:24:57+00:00 analyst — No SonicWall advisory found for this CVE; only the NVD entry (page not retrievable). The August advisory SNWLID-2026-0011 covers different CVEs (66145 etc.), GMS 9.5.1 and earlier, fixed in 9.5.2, which conflicts with 'fixed in 9.5.2' so no fix is known for this one. Nothing verified; X not checked. Revisit when SonicWall PSIRT lists it.

## Documents

- [mentions] SonicWall GMS SNWLID-2026-0011 (August, different CVEs) https://www.sonicwall.com/support/notices/product-notice-sonicwall-gms-security-affected-by-multiple-vulnerabilities/kA1VN000001yVDF0A2

## From the sources

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_