Advisories · Technology

SonicWall Global Management System (GMS).

Every CVE that names SonicWall Global Management System (GMS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109594 CVE record

CVSS 6.8 Medium

SQL injection in SonicWall Global Management System (GMS)
- SonicWall Global Management System (GMS)
- SQL injection
Not analysed yet 3 Nov 2026
CVE-2026-109593 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
- SonicWall Global Management System (GMS)
- CWE-636
Not analysed yet 3 Nov 2026
CVE-2021-20020 CVE record

Improper authentication in SonicWall Global Management System (GMS)
- SonicWall Global Management System (GMS)
- Authentication bypass
Not analysed yet 10 Apr 2021
CVE-2019-7476 CVE record

Improper access control in SonicWall Global Management System (GMS)
- SonicWall Global Management System (GMS)
- Broken access control
Not analysed yet 26 Apr 2019
CVE-2018-9866 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Command injection in SonicWall Global Management System (GMS)
- SonicWall Global Management System (GMS)
- Command injection
Not analysed yet 3 Aug 2018