Is CVE-2026-109593 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-109593

SonicWall recommends upgrading to a supported version of Global Management System. If upgrading is not immediately possible, isolate affected GMS instances from network access to reduce the risk of exploitation. No patch will be released for the affected end-of-life versions.

Quick answers

What is CVE-2026-109593?: SonicWall recommends upgrading to a supported version of Global Management System. If upgrading is not immediately possible, isolate affected GMS instances from network access to reduce the risk of exploitation. No patch will be released for the affected end-of-life versions.
How severe is CVE-2026-109593?: critical, CVSS 9.1
Is CVE-2026-109593 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-109593 be mitigated?: SonicWall recommends upgrading to a supported version of Global Management System. If upgrading is not immediately possible, isolate affected GMS instances from network access to reduce the risk of exploitation. No patch will be released for the affected end-of-life versions.

CVSS

9.1

Vendor

SonicWall

Published

Nov 5, 2026 · 03:15

Patch

Unknown / not confirmed

Affected products

Global Management System (GMS)

Mitigation

SonicWall Declines to Patch End-of-Life Global Management System Vulnerabilities

SonicWall has confirmed that two vulnerabilities affecting end-of-life Global Management System (GMS) versions 9.5.2 and earlier will not receive patches. CVE-2026-109593 (CVSS 9.1) is an unauthenticated file read flaw, and CVE-2026-109594 permits database record alteration. Both flaws affect unsupported software, and SonicWall recommends upgrading to a supported version or isolating affected instances from network access.

—1m

CVE-2026-109593

Quick answers

Related News

SonicWall Declines to Patch End-of-Life Global Management System Vulnerabilities