CVE-2026-109593
Critical · 9.1CVSS
9.1
EPSS
0.5%
Published
Nov 3, 2026
CISA due date
—
The record
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-95860 node-opcua is an OPC UA implementation for TypeScript and Node.js. CWE-636
- CVE-2026-110985 A Kafka broker using SASL/OAUTHBEARER with the default validator… CWE-636
- CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP… CWE-636
- CVE-2026-105933 Apache Pulsar allows an administrator to require end-to-end message encryption for all… CWE-636
- CVE-2026-74048 Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. CWE-636
- CVE-2026-88831 BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed… CWE-636
- CVE-2026-81379 Not failing securely ('failing open') in Visual Studio Code allows an unauthorized… CWE-636
- CVE-2026-85649 (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password… CWE-636