https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593 SonicWall disclosed two flaws in its end-of-life Global Management System (GMS) 9.5.2 and earlier and said no security update will be released. CVE-2026-109593 lets an unauthenticated attacker with network access read internal GMS files and expose sensitive information (CVSS 9.1 from CISA's ADP). CVE-2026-109594 is a post-authentication SQL injection that can let a high-privileged attacker access or modify data in the GMS database (CVSS 6.8). The flaws were reported by Pentest-Tools researchers. SonicWall urges customers to move to Network Security Manager (NSM); until then, keep GMS off untrusted networks. en Wed, 04 Nov 2026 00:00:00 GMT https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593 https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-04-438a3da5 Wed, 04 Nov 2026 00:00:00 GMT high <p><a href="https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/">Source</a></p> https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593 https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593#2026-11-03-c6b689f1 Tue, 03 Nov 2026 00:00:00 GMT high <p><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019">Source</a></p>