{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3asonicwallgms/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sonicwall:gms:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-109593"},{"cvss":6.8,"id":"CVE-2026-109594"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GMS (\u003c= 9.5.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["SonicWall"],"content_html":"\u003cp\u003eSonicWall has disclosed an unauthenticated file read vulnerability (CVE-2026-109593) affecting SonicWall GMS version 9.5.2 and earlier. An attacker with network access to the GMS instance can read internal files, potentially leading to unauthorized information disclosure. Public proof-of-concept exploit code has been identified. Organizations should identify GMS instances and prepare for remediation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows an unauthenticated, network-adjacent attacker to read internal files. This exposure can provide attackers with sensitive information, such as configuration details, credentials, or other system data, which may be leveraged to compromise the GMS instance further or pivot into the managed environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of SonicWall GMS 9.5.2 or earlier within the environment.\u003c/li\u003e\n\u003cli\u003eApply security patches provided by SonicWall as documented in SNWLID-2026-0019.\u003c/li\u003e\n\u003cli\u003eRestrict network access to GMS management interfaces to trusted IP ranges only.\u003c/li\u003e\n\u003cli\u003eReview web server and application access logs for abnormal file access patterns or high volumes of requests targeting internal paths on the GMS appliance.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-04T18:11:25Z","date_published":"2026-11-03T20:15:44Z","id":"https://feed.craftedsignal.io/briefs/2026-11-sonicwall-gms-file-read/","summary":"SonicWall GMS 9.5.2 and earlier is vulnerable to an unauthenticated arbitrary file read vulnerability (CVE-2026-109593) which allows attackers to access sensitive internal files via network-accessible interfaces.","title":"SonicWall GMS: Unauthenticated internal file read (CVE-2026-109593)","url":"https://feed.craftedsignal.io/briefs/2026-11-sonicwall-gms-file-read/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:sonicwall:gms:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}