SonicWall warned of two vulnerabilities impacting end-of-life Global Management System (GMS) versions 9.5.2 and earlier.
With no patches planned due to EoL status, developers and administrators reviewing system inventories should note the high-severity file read flaw (CVE-2026-109593) and SQL injection (CVE-2026-109594), and plan upgrades to NSM.
These problems concern version 9.5.2 and older, which have reached the end of their support by the company.
What are the two problems?
The first problem could allow strangers with network access to read internal system files and potentially gain access to sensitive information, without needing a login password.
The second problem requires prior login to the system and could allow someone who already has access to view or change data stored in the database, as long as certain conditions are met.
What does the company propose?
Because these products are no longer supported, SonicWall has made it clear that no updates or fixes will be released.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Serious security flaws in Xen software allow access to other machines' memory
↗
The company recommends that organizations using them upgrade their systems to a newer service called SonicWall Network Security Manager.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)