SonicWall warns of unpatched security flaws in end-of-life GMS software
SonicWall Global Management System
SonicWall issued a warning regarding two security vulnerabilities impacting end-of-life Global Management System products. The vendor confirmed that these vulnerabilities will not receive software patches.
why this severityDisclosed vulnerability with no fix available due to end-of-life status.
- CVSS
- 9.1
- EPSS
- 0.01 · top 56% · 2026-11-13
- fix status
- No patch yet
- affected
- Global Management System (GMS) EOL versions
- first report
- 4 Nov 2026
- last update
- 4 Nov 2026
- CVE ids
What to do
Upgrade from end-of-life GMS systems to supported alternatives.
Timeline · 1
Sources · 2
News and write-ups
- 2026-11-04SonicWall warns of unpatched flaws in end-of-life GMS softwareBleepingComputer · bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-
- 2026-11-04SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database RecordsThe Hacker News · thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- No AI role
- categories
- General security
- severity
- 2 · Disclosed vulnerability
- fix status
- No patch yet
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 4 Nov 2026 · first reported 4 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-11-04 15:36Z · updated 2026-11-04 22:01Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# SonicWall warns of unpatched security flaws in end-of-life GMS software https://gcdradar.vercel.app/incidents/sonicwall-warns-of-unpatched-security-flaws-in-end-of-life-g · AIR-2026-1770 · live - Lane: Patch now - Severity: 2 (Disclosed vulnerability): Disclosed vulnerability with no fix available due to end-of-life status. - Fix status: No patch yet - First reported: 2026-11-04 - AI role: No AI role - Products: SonicWall Global Management System - CVE ids: CVE-2026-109593 - CVSS: 9.1 ## Summary SonicWall issued a warning regarding two security vulnerabilities impacting end-of-life Global Management System products. The vendor confirmed that these vulnerabilities will not receive software patches. ## What to do Upgrade from end-of-life GMS systems to supported alternatives. ## Affected and fixed versions - Affected: Global Management System (GMS) EOL versions ## Latest updates - 2026-11-04: SonicWall warns of unpatched flaws in end-of-life GMS software (https://bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software) ## Sources - 2026-11-04 BleepingComputer: SonicWall warns of unpatched flaws in end-of-life GMS software https://bleepingcomputer.com/news/security/sonicwall-warns-of-unpatched-flaws-in-end-of-life-gms-software - 2026-11-04 The Hacker News: SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveDixell refrigeration units Multiple vulnerabilities discovered in Dixell refrigeration units
Patch now · Exploited · since 13 Nov 2026
- live8.6UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability
Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026
- liveUniversity of Texas at Arlington discloses data breach from cyberattack
Breaches & attacks · Exploited · since 13 Nov 2026
- livePDF viewers Genuine PDF Forgeries: Attacking Signature Verification via Human Factors
Research · since 13 Nov 2026
- liveAMD SEV-SNP Mior and Skyfall Attacks Target AMD SEV-SNP VMs
Research · since 13 Nov 2026