Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-109593 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-11-03 |
| Vendor | SonicWall |
| Product | GMS |
| CVSS Score | 9.1 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
An unauthenticated attacker with network access to SonicWall Global Management System (GMS) 9.5.2 and earlier may be able to read internal GMS files, potentially exposing sensitive information. GMS centrally manages SonicWall firewalls, so the exposed data may help a further attack on the managed devices.
Required Actions
Apply the fix or version listed in SonicWall advisory SNWLID-2026-0019. Until you update, do not expose the GMS interface to the internet, restrict access to the management network and trusted addresses, and after updating consider rotating passwords and keys stored in GMS.
Who Is Affected?
The vulnerability affects SonicWall GMS (Global Management System) by SonicWall, versions 9.5.2 and earlier — the central management system for SonicWall firewalls used by companies and managed service providers. Check whether your organization or integrator runs GMS.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
