# CVE-2026-109593

Unauthenticated file-read in SonicWall GMS <=9.5.2 exposing internal files

- Page: https://www.vulneraibility.com/cve/CVE-2026-109593
- CVSS: 9.1
- Known exploited: not in CISA KEV as of our last sync
- CISA SSVC: exploitation none, automatable yes, technical impact partial (assessed 2026-11-03)
- Weakness: CWE-636
- Published: 2026-11-03

## Affected versions

- SonicWall Global Management System (GMS): affected 9.5.2 and earlier versions

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote unauthenticated read of internal GMS files; may leak credentials, configs, tokens enabling lateral movement and full network compromise.

## Action

Immediate action required

## Recommendation

Isolate GMS, restrict network access, apply vendor patch/mitigations immediately

## References

- [advisory] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.