6.8
Medium
CVE-2026-109594 Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…
Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Global Management System (GMS) | Versions not published |
Other CVEs of Global Management System (GMS)
The 5 CVEs of Global Management System (GMS) →
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…
9.1
Critical
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate…
Not rated
CVE-2019-7476
A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using…
Not rated
CVE-2018-9866
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…
9.8
Critical