401 matches found
SonicWall GMS and Analytics Web Services - Shell Injection
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...
CVE-2026-109594
Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information...
EUVD-2026-116040
Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...
CVE-2026-109594
Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...
CVE-2026-109594
A post-authentication SQL Injection vulnerability (CWE-89) exists in the End-of-Life SonicWall GMS version 9.5.2 and earlier. Under specific conditions, an authenticated attacker can access or modify information stored within the GMS database. No specific exploitation details or remediation steps...
CVE-2026-109593
An unauthenticated attacker with network access to SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files. This vulnerability, identified as CVE-2026-109593 , is caused by CWE-636: Not Failing Securely ('Failing Open') and could potentially expose sensitive information. T...
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information...
EUVD-2026-116034
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information...
CVE-2026-109594: SonicWall Global Management System (GMS): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…
Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...
PT-2026-136271
Name of the Vulnerable Software and Affected Versions SonicWall GMS versions prior to 9.5.3 Description An unauthenticated attacker with network access can read internal files, which may expose sensitive information. This issue can be chained with a SQL injection to escalate from harvesting...
CVE-2026-109593: SonicWall Global Management System (GMS): An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information...
PT-2026-136272
Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...
SonicWALL Global Management System (GMS) < 9.4 Multiple Vulnerabilities (SNWLID-2024-0007)
The version of SonicWALL Global Management System GMS running on the remote host is prior to 9.4. It is, therefore, affected by multiple vulnerabilities: - The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the...
CVE-2026-106450 vulnerabilities
Vulnerabilities for packages: cassandra, apache-polaris-fips, elasticsearch-fips, conductor, metabase, apache-pulsar, debezium, cruise-control, kayenta, sonarqube, apache-polaris, datahub-gms, traccar, automq, debezium-connector-db2, apache-nifi, elasticsearch, akhq, hono,...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: cassandra, apache-polaris-fips, elasticsearch-fips, conductor, metabase, apache-pulsar, debezium, cruise-control, kayenta, sonarqube, apache-polaris, datahub-gms, traccar, automq, debezium-connector-db2, apache-nifi, elasticsearch, akhq, hono,...
GHSA-GM45-99XC-R7WV vulnerabilities
Vulnerabilities for packages: cassandra, apache-polaris-fips, elasticsearch-fips, conductor, metabase, apache-pulsar, debezium, cruise-control, kayenta, sonarqube, apache-polaris, datahub-gms, traccar, automq, debezium-connector-db2, apache-nifi, elasticsearch, akhq, hono,...
VulnCheck KEV: CVE-2023-34132
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...
CVE-2026-66154
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...