SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

SonicWall has disclosed two security vulnerabilities affecting its end-of-life Global Management System (GMS) versions 9.5.2 and earlier. The company has stated it will not release patches for these flaws due to the EoL status of the product. One of the vulnerabilities, CVE-2026-109593, carries a critical CVSS score of 9.1 and allows unauthenticated attackers with network access to read internal GMS files. A second vulnerability is also mentioned, capable of altering database records. The lack of patching leaves organizations still running these legacy systems exposed to potential data exposure and database tampering. Users are implicitly urged to upgrade to supported versions of the product.