{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594) · updates",
  "home_page_url": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593",
  "feed_url": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/feed.json",
  "description": "SonicWall disclosed two flaws in its end-of-life Global Management System (GMS) 9.5.2 and earlier and said no security update will be released. CVE-2026-109593 lets an unauthenticated attacker with network access read internal GMS files and expose sensitive information (CVSS 9.1 from CISA's ADP). CVE-2026-109594 is a post-authentication SQL injection that can let a high-privileged attacker access or modify data in the GMS database (CVSS 6.8). The flaws were reported by Pentest-Tools researchers. SonicWall urges customers to move to Network Security Manager (NSM); until then, keep GMS off untrusted networks.",
  "language": "en",
  "_pwn": {
    "slug": "sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593",
    "severity": "high",
    "status": "live",
    "patchStatus": "unpatched",
    "rss": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/feed.xml",
    "llms": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/llms.txt",
    "json": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-04-438a3da5",
      "url": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-04-438a3da5",
      "title": "SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594): BleepingComputer reports SonicWall's warning about the unpatched GMS flaws.",
      "content_text": "SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594): BleepingComputer reports SonicWall's warning about the unpatched GMS flaws.\n\nSource: https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-03-c6b689f1",
      "url": "https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-03-c6b689f1",
      "title": "SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594): SonicWall publishes SNWLID-2026-0019 for CVE-2026-109593 and CVE-2026-109594 in EOL GMS and says no remediation will be released; it recommends upgrading to NSM.",
      "content_text": "SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594): SonicWall publishes SNWLID-2026-0019 for CVE-2026-109593 and CVE-2026-109594 in EOL GMS and says no remediation will be released; it recommends upgrading to NSM.\n\nSource: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019",
      "date_published": "2026-11-03T00:00:00.000Z",
      "external_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019",
      "tags": [
        "high"
      ]
    }
  ]
}