CVE-2026-109594
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
59/100
Published: 2026-11-03
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
None
S:
Changed
C:
High
I:
None
A:
None
Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| SonicWall | Global Management System (GMS) | 9.5.2 and earlier versions |
| SonicWall | Global Management System (GMS) | 9.5.2 and earlier versions |
References & Advisories (1)
vendor-advisory