CybersecurityUpdated November 4

SonicWall won't patch two GMS flaws.

There's a catch in the warning: it covers versions 9.5.2 and earlier of SonicWall's Global Management System (GMS), which are end-of-life, and the company says it won't patch the two flaws. The flaws could expose files and alter database records, The Hacker News reports. One, CVE-2026-109593, has a CVSS score of 9.1. The Hacker News describes it as an unauthenticated file-read vulnerability: an attacker with network access could read internal GMS files.

2 publishers2 reports

Coverage started November 4