Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | Global Management System (GMS) | 9.5.2 and earlier versions | — |
Advisories 1
- WID-SEC-2026-4354 SonicWall GMS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019 vendor-advisory