{"id":"CVE-2026-109593","published":"2026-11-03T17:17:53.690","lastModified":"2026-11-03T20:32:50.687","description":"An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwes":["CWE-636"],"vendors":[],"products":[],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated attacker can read internal files on SonicWall GMS 9.5.2 and earlier due to a flaw in file access controls (CWE-636), potentially exposing sensitive internal data.","exploitability":"Low effort for an unauthenticated attacker with network access; no authentication or user interaction required.","blast_radius":"Exposure of internal files may lead to disclosure of credentials, system configurations, or other confidential data, compromising confidentiality and availability.","remediation":"Upgrade to SonicWall GMS version 9.5.3 or later, as this is the first fixed version addressing CVE-2026-109593.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-disclosure","cwe636","sonicwall","gms","unauthenticated-access"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:55:27.104Z"}}