CVE-2026-109594
CVSS Score
6.8
EPSS Score
0.0%
EPSS Percentile
0th
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
| CWE | CWE-89 |
| Vendor | sonicwall |
| Product | global management system (gms) |
| Published | Nov 3, 2026 |
| Last Updated | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for sonicwall global management system (gms)
Be the first to know when new medium vulnerabilities affecting sonicwall global management system (gms) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / Global Management System (GMS)
9.5.2 and earlier versions
References
Credits
Matei 'Mal' Badanoiu and Andrei Lungu of Pentest-Tools.com