6.8
Moyenne
CVE-2026-109594 Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…
Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Global Management System (GMS) | Versions non publiées |
Autres CVE de Global Management System (GMS)
Les 5 CVE de Global Management System (GMS) →
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…
9.1
Critique
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate…
Non notée
CVE-2019-7476
A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using…
Non notée
CVE-2018-9866
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…
9.8
Critique