# SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594) · pwn.watch

> SonicWall disclosed two flaws in its end-of-life Global Management System (GMS) 9.5.2 and earlier and said no security update will be released. CVE-2026-109593 lets an unauthenticated attacker with network access read internal GMS files and expose sensitive information (CVSS 9.1 from CISA's ADP). CVE-2026-109594 is a post-authentication SQL injection that can let a high-privileged attacker access or modify data in the GMS database (CVSS 6.8). The flaws were reported by Pentest-Tools researchers. SonicWall urges customers to move to Network Security Manager (NSM); until then, keep GMS off untrusted networks.

Page: https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593 · generated 2026-11-04T18:18:57.081Z

## Status
- Severity: high · status: live · patch: unpatched
- Product: SonicWall Global Management System (GMS) 9.5.2 and earlier
- Started: 2026-11-03
- CVEs: CVE-2026-109593, CVE-2026-109594
- Affected: GMS 9.5.2 and earlier

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/feed.xml
- JSON Feed: https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593.json
- This file: https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593/llms.txt

## Updates (newest first)
- 2026-11-04: BleepingComputer reports SonicWall's warning about the unpatched GMS flaws. (https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/)
- 2026-11-03: SonicWall publishes SNWLID-2026-0019 for CVE-2026-109593 and CVE-2026-109594 in EOL GMS and says no remediation will be released; it recommends upgrading to NSM. (https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019)

## Fix brief
# Security brief: SonicWall GMS: end-of-life, no fix coming for pre-auth file read and SQL injection (CVE-2026-109593, CVE-2026-109594)

Source: https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593 · status: live · severity: high · updated Nov 4, 2026, 14:58 UTC

## Patch status
**UNPATCHED: no fixed release yet. Apply mitigations and watch for updates.**

## What it is
SonicWall disclosed two flaws in its end-of-life Global Management System (GMS) 9.5.2 and earlier and said no security update will be released. CVE-2026-109593 lets an unauthenticated attacker with network access read internal GMS files and expose sensitive information (CVSS 9.1 from CISA's ADP). CVE-2026-109594 is a post-authentication SQL injection that can let a high-privileged attacker access or modify data in the GMS database (CVSS 6.8). The flaws were reported by Pentest-Tools researchers. SonicWall urges customers to move to Network Security Manager (NSM); until then, keep GMS off untrusted networks.

Severity detail: CVE-2026-109593 is CVSS 9.1 (CISA ADP), pre-auth; no exploitation reported; product is EOL and will not be patched

- Product: SonicWall Global Management System (GMS) 9.5.2 and earlier
- CVE / advisory ids: CVE-2026-109593, CVE-2026-109594

## Affected versions
- GMS 9.5.2 and earlier

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Mitigations
The data marks this as unpatched. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows).

## Latest updates
- Nov 4, 2026: BleepingComputer reports SonicWall's warning about the unpatched GMS flaws.
- Nov 3, 2026: SonicWall publishes SNWLID-2026-0019 for CVE-2026-109593 and CVE-2026-109594 in EOL GMS and says no remediation will be released; it recommends upgrading to NSM.

## Advisories
- [SonicWall PSIRT SNWLID-2026-0019](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019) (SonicWall)
- [CVE-2026-109593](https://nvd.nist.gov/vuln/detail/CVE-2026-109593) (NVD)
- [CVE-2026-109594](https://nvd.nist.gov/vuln/detail/CVE-2026-109594) (NVD)

## Write-ups & news
- [SonicWall warns of unpatched flaws in end-of-life GMS software](https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/)

## Caveats
CISA SSVC (2026-11-03): exploitation none, automatable yes for CVE-2026-109593.

---
Machine-readable: https://pwn.watch/i/sonicwall-gms-eol-unpatched-file-read-sqli-cve-2026-109593.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.