SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

AI Summary

SonicWall has disclosed two critical vulnerabilities in end-of-life Global Management System (GMS) 9.5.2 and earlier that will not receive patches: CVE-2026-109593 (CVSS 9.1), an unauthenticated file read flaw, and a second flaw allowing database record modification. Organizations still running GMS 9.5.2 or earlier have no vendor remediation path and should migrate immediately or implement network-level controls to restrict access to the management interface.

Read full article → https://thehackernews.com/2026/11/sonicwall-wont-p…

Relevance score: 85.0/100

# More from November 06

1
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux The Hacker News
2
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run The Hacker News
3
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution The Hacker News
4
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root The Hacker News
6
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes SecurityWeek
7
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says The Hacker News
8
French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million The Record
9
Cyberattack disrupts blood storage refrigeration systems in France BleepingComputer
10
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads The Hacker News