SonicWall GMS: Unauthenticated internal file read (CVE-2026-109593)

SonicWall has disclosed an unauthenticated file read vulnerability (CVE-2026-109593) affecting SonicWall GMS version 9.5.2 and earlier. An attacker with network access to the GMS instance can read internal files, potentially leading to unauthorized information disclosure. Public proof-of-concept exploit code has been identified. Organizations should identify GMS instances and prepare for remediation.

Impact

The vulnerability allows an unauthenticated, network-adjacent attacker to read internal files. This exposure can provide attackers with sensitive information, such as configuration details, credentials, or other system data, which may be leveraged to compromise the GMS instance further or pivot into the managed environment.

Recommendation

• Identify all instances of SonicWall GMS 9.5.2 or earlier within the environment.
• Apply security patches provided by SonicWall as documented in SNWLID-2026-0019.
• Restrict network access to GMS management interfaces to trusted IP ranges only.
• Review web server and application access logs for abnormal file access patterns or high volumes of requests targeting internal paths on the GMS appliance.