CVE-2026-109593

CVSS 9.1 (critical) · published 2026-11-03

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Weakness: CWE-636

Source: NVD CVE-2026-109593

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.