SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Summary
SonicWall has announced that two vulnerabilities in its end-of-life Global Management System (GMS) will not be patched. The vulnerabilities, CVE-2026-109593, allow unauthenticated attackers to read internal GMS files, and another unpatched flaw could permit unauthorized database record alteration.
IFF Assessment
FOE
The unpatched vulnerabilities expose sensitive data and system integrity, creating opportunities for attackers.
Severity
9.1
Critical
(CVSS v3.1)
Defender Context
Organizations still using end-of-life SonicWall GMS versions are at significant risk. Defenders should prioritize migrating away from these unsupported systems and ensure all critical assets are running patched and supported software to prevent exploitation of known vulnerabilities.