CVE-2026-109594
MEDIUM
NVD
CVSS Score
6.8
Severity
MEDIUM
Published
Nov 03, 2026
Vendor
unknown
Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.