CVE intelligence

CVE-2026-109593

Vulnerability intelligence

Published Nov 3, 2026Sources checked Nov 3, 2026

9.1CRITICALCVSS out of 10

What this means

Review the available evidence

CVE-2026-109593 and is rated Critical severity with a CVSS score of 9.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

SonicWall PSIRT Advisories guidance

Vendor revision: Nov 3, 2026

Install the applicable fixed SonicWall release for your product and branch.

Vendor-listed releases

Fixed Product(s): Fixed Versions
GMS - Virtual Appliance and Windows: A fix version is not available as the product has reached End-of-Life (EOL).

CISA KEVNot listedBased on the latest collected catalog

EPSSUnavailableNo current score collected

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-109593?

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Source: NVD