CVE-2026-109594 — Vulnerability intelligence
—
Published:
- CVSS
- 6.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.