CVE-2026-109593

CRITICAL
INFO Priority: 0.05 BB Relevance: 78/100
Published: 2026-11-03 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: High

Description

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
SonicWall Global Management System (GMS) 9.5.2 and earlier versions
SonicWall Global Management System (GMS) 9.5.2 and earlier versions

References & Advisories (1)

Bug Bounty Relevance

78 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploitation Probability

0.52%
Raw Score 0.005210
Percentile 44.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00521
2026-11-12
0.00521
2026-11-10
0.00521
2026-11-09
0.00521
2026-11-08
0.00521
2026-11-07
0.00521
2026-11-06
0.00521
2026-11-05
0.00521
2026-11-04
0.00521

Intelligence Sources

mitre ref →
nvd ref →