CVE-2026-1095946.8Medium
SonicWall Global Management System (GMS) vulnerability
SonicWall · Global Management System (GMS)
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
6.8MediumCVSS
LowMediumHighCrit.
DescriptionNVD
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 4 Nov.
- SonicWall discloses two unpatched GMS vulnerabilitiesSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.