CVE-2026-109593

validated

EUVD-2026-116034 ↗

check availablenot proven exploitable

cve.orgpublic pockev

SonicWall Global Management System (GMS) 9.5.2 and earlier versions

CWE-636 Not Failing Securely ('Failing Open')

ETK-2026-3386, permanent identifier

cvss9.1cna vendorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

+1h23mTTV

14mAI analysis

Check if you are vulnerable

timeline

0 = cve.org publication

trigger signal (cve.org) +0mcheck available+83magent stopped

+30min

+60min

+90min

description

SonicWall Global Management System (GMS) 9.5.2 and earlier may allow unauthenticated network attackers to read internal GMS files. Exploitation requires network access to the GMS service and could expose sensitive information.

mitigation

Restrict GMS network access to trusted administrative networks and block untrusted inbound connections. Monitor for vendor remediation and upgrade when a supported fixed release is identified.

check

available

exploit

automation

contextual

auth required

EPSS

–

agent run time

14m

cve.org record, t = 0

2026-11-03 16:25Z

Δ to public poc

–

Δ to kev

–

outcome

Contextual check: a technique exists and was validated, but no deterministic check could cover this one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-11-03 16:25Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-109593

this entry in the feed

GET /api/v1/feed/CVE-2026-109593

{
  "etk_id": "ETK-2026-3386",
  "cve_id": "CVE-2026-109593",
  "display_id": "CVE-2026-109593",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-116034",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated file read in SonicWall GMS",
  "summary": "SonicWall Global Management System (GMS) 9.5.2 and earlier may allow unauthenticated network attackers to read internal GMS files. Exploitation requires network access to the GMS service and could expose sensitive information.",
  "mitigation": "Restrict GMS network access to trusted administrative networks and block untrusted inbound connections. Monitor for vendor remediation and upgrade when a supported fixed release is identified.",
  "vendor": "SonicWall",
  "product": "Global Management System (GMS)",
  "affected": [
    {
      "affected_notes": [
        "9.5.2 and earlier versions"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Global Management System (GMS)",
      "purl": null
    }
  ],
  "cwes": [
    636
  ],
  "cvss_score": 9.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 13.942384633333333,
  "t0_at": "2026-11-03T16:25:11.831000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-03T17:48:18.455560+00:00",
      "days": 0.05771556203703704,
      "is_lower_bound": false,
      "measured_at": "2026-11-03T16:25:11.831000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-03T16:25:11.831000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-03T16:25:11.831000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109593"
    }
  }
}

published 2026-11-03 17:34Z
last change 2026-11-03 18:12Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.