CVE-2026-109593
Received Received - Intake

Unauthenticated File Read in SonicWall GMS

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: SonicWALL, Inc.

Description
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-109593
EUVD
EUVD-2026-116034

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SonicWall Global Management System (GMS) 9.5.2 and earlier versions

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-636 When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in SonicWall GMS 9.5.2 and earlier allows an unauthenticated attacker with network access to read internal GMS files. This could expose sensitive information due to improper access controls.

Impact Analysis

An attacker could access sensitive data stored on the GMS system, leading to potential data breaches, loss of confidential information, or further exploitation of the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized access to sensitive data, potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Immediately upgrade SonicWall GMS to a version later than 9.5.2 to address the unauthenticated file read vulnerability. Ensure network access controls restrict unauthorized access to GMS interfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-109593. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...