Vendors and CVEs › CVEs › CVE-2026-109593
CVE-2026-109593: what it is, who is affected and what to do
SonicWall warned of two flaws in its end-of-life Global Management System (GMS) and said it will not patch them. One, CVE-2026-109593 (CVSS 9.1), lets an unauthenticated attacker with network access read internal GMS files.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 9.1, as the source states.
- EPSS. <1% chance of exploitation in the next 30 days, when reported.
- Records. CVE-2026-109593 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical
SonicWall will not patch two flaws in end-of-life management software
SonicWall warned of two flaws in its end-of-life Global Management System (GMS) and said it will not patch them.