PT-2026-136271
CVE-2026-109593
·
Published
2026-11-03
·
Updated
2026-11-08
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SonicWall GMS versions prior to 9.5.3
Description
An unauthenticated attacker with network access can read internal files, which may expose sensitive information. This issue can be chained with a SQL injection to escalate from harvesting credentials to gaining management-plane control over all downstream firewalls.
Recommendations
Upgrade to the Network Security Manager (NSM).
Found an issue in the description? Have something to add? Feel free to write us 👾