# SonicWall leaves two flaws unpatched in retired GMS software

_Published Wednesday, November 4, 2026 at 1:23 PM EST · Security · Latest · Tier 2 — Notable_

![SonicWall leaves two flaws unpatched in retired GMS software — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgME1T4MkjI8UEzzSmlLgbPG6a__VNQNoKkhuxiaW5zF5fnHLPmsTdkGoIL06JTeER1jcOMH-WLuNYyva_sSW_8DnZojbMC8ikgNME3ZPUAdkij-9nVm8joHHdaZRoLNbVgcSVLNSc6Tt7UJ3YPhQmea3OtQwg-H2UzUPIgWq7nFwoEQcMsGCKf-0fImEvd/s1700-nu-rw-lo-l85-e365/sonic.jpg)

SonicWall warned Tuesday that two vulnerabilities in Global Management System versions 9.5.2 and earlier will receive no security updates because the product has reached end of life. The company urged organizations using GMS to upgrade to Network Security Manager.

CVE-2026-109593, rated 9.1, allows an unauthenticated attacker with network access to read internal files. CVE-2026-109594, rated 6.8, allows an authenticated attacker to access or modify database information under specific conditions. The flaws leave affected users without a forthcoming patch for either exposure.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html)

---
Canonical: https://techandbusiness.org/newswire/h85aIVmR5lH_buPr1edWnl
Published: 2026-11-04T18:23:28.729Z
Story chronology: 2026-11-03T00:00:00.000Z
Retrieved: 2026-11-04T22:00:10.505Z
Publisher: Tech & Business (techandbusiness.org)