hacker-news · Crawled Nov 5, 2026

SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

8 IoCs
Read original article ↗

AI Summary

SonicWall has disclosed two unpatched vulnerabilities in its end-of-life Global Management System (GMS) 9.5.2 and earlier versions, which will not receive security updates. CVE-2026-109593 is a critical unauthenticated file read vulnerability (CVSS 9.1) that could allow attackers to read sensitive internal files. CVE-2026-109594 is a medium-severity post-authentication SQL injection flaw (CVSS 6.8) that could enable an authenticated attacker to access or modify database records. Organizations are urged to migrate to SonicWall Network Security Manager (NSM) to mitigate risks.

AI-extracted · verify before operational use

Indicators of Compromise 8 extracted

Type Value Detail
IP 1[.]1[.]1[.]1 Details →
IP 2[.]2[.]2[.]2 Details →
IP 3[.]3[.]3[.]3 Details →
IP 4[.]4[.]4[.]4 Details →
IP 5[.]5[.]5[.]5 Details →
IP 6[.]6[.]6[.]6 Details →
IP 7[.]7[.]7[.]7 Details →
IP 8[.]8[.]8[.]8 Details →