SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below - CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files,
SonicWall has issued a warning regarding two vulnerabilities affecting its end-of-life Global Management System (GMS) systems, stating that no patches will be provided. The vulnerabilities are present in SonicWall GMS 9.5.2 and earlier versions. SonicWall informed organizations using the product of the associated security risks and recommended upgrading to the SonicWall Network Security Manager (NSM) instead.
This announcement follows a month after SonicWall released fixes for CVE-2026-102255, a critical pre-authenticated server-side request forgery (SSRF) flaw. This particular vulnerability, which could allow attackers to access internal functions and execute unauthorized actions, has been exploited multiple times since October 9, 2026.
Written by urgent.news from The Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
