Covered by 2 outlets — first reported by BleepingComputer, Nov 4, 14:42 UTC
SonicWall warns of unpatched flaws in end-of-life GMS software
MentionsSonicWall
Summary
SonicWall has warned customers of two vulnerabilities in its Global Management System (GMS), a product that has reached end of life. The company says it will not patch them. They affect GMS 9.5.2 and earlier versions; one, CVE-2026-109593 (CVSS 9.1), is an unauthenticated file read flaw that could let an attacker with network access read internal GMS files, and the second could allow database records to be altered.
AI summary by the SecurityTabs newsroom, checked against BleepingComputer, The Hacker News. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
SonicWall warns of unpatched flaws in end-of-life GMS software
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.
The Hacker News
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.
Explained
The technology and terms in this story. Learn more
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.