SonicWall has warned customers about two security flaws in its end-of-life Global Management System (GMS) software. The company says it will not release patches for the vulnerabilities and recommends that organizations move to its Network Security Manager (NSM) platform.
GMS allows IT administrators to deploy and manage SonicWall security appliances through a single interface. SonicWall has replaced the product with NSM, and the disclosed issues affect GMS version 9.5.2 and earlier.
One of the flaws, tracked as CVE-2026-109593, could allow an unauthenticated attacker with network access to a vulnerable system to read internal files and obtain sensitive information.
SonicWall said the affected product has reached end of life, so no remediation or security updates will be provided. It urged organizations still using GMS to consider the risks and upgrade to NSM.
Sources: BleepingComputer.