CVE-2026-109594
validatedZero produced an exploit or a check.GHSA-w3p9-mvmw-xhwm ↗EUVD-2026-116040 ↗
description
SonicWall Global Management System (GMS) 9.5.2 and earlier is affected by an SQL injection flaw. An authenticated attacker may be able to read or change data in the GMS database when the relevant conditions are present.
mitigation
Retire or migrate affected GMS deployments to a supported management product, as no fixed GMS version is recorded. Until migration is complete, restrict GMS access to trusted administrators and limit network exposure.
outcome
Contextual check: a technique exists and was validated, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-11-03 16:28Zbleepingcomputer: trigger signal, started the run
- 2026-11-03 16:28Zcve.org record for CVE-2026-109594
- 2026-11-04 14:42ZSonicWall warns of unpatched flaws in end-of-life GMS software
this entry in the feed
GET /api/v1/feed/CVE-2026-109594
{ "etk_id": "ETK-2026-3508", "cve_id": "CVE-2026-109594", "display_id": "CVE-2026-109594", "ghsa_id": "GHSA-w3p9-mvmw-xhwm", "euvd_id": "EUVD-2026-116040", "status": "published", "anchor_state": "anchored", "title": "SQL injection in SonicWall Global Management System", "summary": "SonicWall Global Management System (GMS) 9.5.2 and earlier is affected by an SQL injection flaw. An authenticated attacker may be able to read or change data in the GMS database when the relevant conditions are present.", "mitigation": "Retire or migrate affected GMS deployments to a supported management product, as no fixed GMS version is recorded. Until migration is complete, restrict GMS access to trusted administrators and limit network exposure.", "vendor": "SonicWall", "product": "Global Management System (GMS)", "affected": [ { "affected_notes": [ "9.5.2 and earlier versions" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "Global Management System (GMS)", "purl": null } ], "cwes": null, "cvss_score": 6.8, "cvss_src": "other", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "epss_score": 0.0038, "epss_percentile": 0.3227, "epss_asof": "2026-11-06", "automation": "contextual", "check": true, "check_confidence_basis": "assessed", "exploit": false, "pipeline_minutes": 9.745462616666666, "t0_at": "2026-11-03T16:28:35.183000+00:00", "signals": { "check": { "at": "2026-11-06T15:00:36.246457+00:00", "days": 2.9389011974189816, "is_lower_bound": false, "measured_at": "2026-11-03T16:28:35.183000+00:00", "url": null }, "trigger_signal": { "at": "2026-11-03T16:28:35.183000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-11-03T16:28:35.183000+00:00", "url": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software/" } } }
published 2026-11-04 14:42Z
last change 2026-11-07 18:41Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.