Skip to content

Known vulnerabilities in SonicWall Global Management System (GMS)

Is your version affected?

CVE Summary Score Published
CVE-2026-109594 Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability… 6.8 Medium Nov 3, 2026
CVE-2026-109593 An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read… 9.1 Critical Nov 3, 2026
CVE-2021-20020 A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate… Not rated Apr 10, 2021
CVE-2019-7476 A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using… Not rated Apr 26, 2019
CVE-2018-9866 A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management… 9.8 Critical Aug 3, 2018

Other SonicWall products