CVE-2026-109594mediumCWE-89

CVE-2026-109594: falha de média gravidade em SonicWall Global Management System (GMS)

Publicada em

Seguir esta CVE+ Monitorar Global Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.4%
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
SonicWall · Global Management System (GMS)
CVEs relacionadas — SonicWall Global Management System (GMS)

No mesmo produto, das mais perigosas para as menos.

CVE-2018-9866CRITICALCVE-2018-9866EPSS 4.5%CVE-2021-20020—CVE-2021-20020EPSS 3.9%CVE-2019-7476—CVE-2019-7476EPSS 1.4%CVE-2026-109593CRITICALCVE-2026-109593EPSS 0.5%