{"metadata": {"vulnerability": "CVE-2026-109593", "count": 38, "kinds": {"milestone": 7, "sighting": 16, "kev": 0, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2026-10-12T20:55:18.449Z", "date_only": false, "value": "2026-10-12T20:55:18.449Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109593", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1456", "record": "CERTFR-2026-AVI-1456", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-03T16:11:00Z", "date_only": false, "value": "2026-11-03T16:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-109593", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T16:25:11.831Z", "date_only": false, "value": "2026-11-03T16:25:11.831Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109593", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T16:25:11.831Z", "date_only": false, "value": "2026-11-03T16:25:11.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-109593", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T16:30:37.758Z", "date_only": false, "value": "2026-11-03T16:30:37.758755Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117553459169210724", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "80d311ea-f3b9-409d-8914-4c594e45dc94", "content": "CVE-2026-109593  An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109593https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019#sonicwall #SonicWall #GlobalManagementSystem(GMS)#CVE_2026_109593#bot", "url": "https://infosec.exchange/users/cve/statuses/117553459169210724"}, {"timestamp": "2026-11-03T17:06:10.311Z", "date_only": false, "value": "2026-11-03T17:06:10.311409Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109593", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-03T17:06:10.311Z", "date_only": false, "value": "2026-11-03T17:06:10.311409Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109593", "record": "FKIE_CVE-2026-109593", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-03T17:06:12.837Z", "date_only": false, "value": "2026-11-03T17:06:12.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109593", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T17:06:12.837Z", "date_only": false, "value": "2026-11-03T17:06:12.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109593", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T17:17:53Z", "date_only": false, "value": "2026-11-03T17:17:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-78QH-WC3P-GPJ2", "record": "GHSA-78QH-WC3P-GPJ2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T17:17:53.690Z", "date_only": false, "value": "2026-11-03T17:17:53.690", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109593", "record": "FKIE_CVE-2026-109593", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T18:07:10.657Z", "date_only": false, "value": "2026-11-03T18:07:10.657713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzggkt6usq2p", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "9bf604bc-db3d-4858-a6e5-5f471f6af87e", "content": "\ud83d\udea8 CVE-2026-109593 \u2014 CVSS 9.1 CRITICAL\n\nAn unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-109593\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzggkt6usq2p"}, {"timestamp": "2026-11-03T18:10:04.846Z", "date_only": false, "value": "2026-11-03T18:10:04.846613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzggpxpvxc2b", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "ac25b048-4139-4023-a086-ed0ac443fbc6", "content": "CVE-2026-109593 - global management system (gms)\nIf someone on the same network can reach SonicWall Global Management System version 9.5.2 or older, they may be able to open and read files stored inside the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sonicwall #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzggpxpvxc2b"}, {"timestamp": "2026-11-03T18:31:07Z", "date_only": false, "value": "2026-11-03T18:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-78QH-WC3P-GPJ2", "record": "GHSA-78QH-WC3P-GPJ2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T18:31:07Z", "date_only": false, "value": "2026-11-03T18:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-78QH-WC3P-GPJ2", "record": "GHSA-78QH-WC3P-GPJ2", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T20:32:50.687Z", "date_only": false, "value": "2026-11-03T20:32:50.687", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109593", "record": "FKIE_CVE-2026-109593", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T23:15:00.612Z", "date_only": false, "value": "2026-11-03T23:15:00.612930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mzgxrbizsv23", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "ab83f586-880b-44d7-a956-6d0cb2ee10a9", "content": "SonicWall GMS 9.5.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u5185\u90e8\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308a\u3001\u6a5f\u5bc6\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-109593 CVSS 9.1 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mzgxrbizsv23"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1456", "record": "CERTFR-2026-AVI-1456", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1456", "record": "CERTFR-2026-AVI-1456", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1456", "record": "CERTFR-2026-AVI-1456", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-04T16:00:38Z", "date_only": false, "value": "2026-11-04T16:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "646d48ee-289e-42bf-ba6a-37ef09f28344", "content": "SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.\n\nDetails of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below -\n\n\n  CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files,", "url": "https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html"}, {"timestamp": "2026-11-04T17:47:22Z", "date_only": false, "value": "2026-11-04T17:47:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10571", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "35aab256-0e5e-4fca-be37-aa6e7c38906e", "content": "\ud83d\udea8 No patches coming.\n\nSonicWall confirms two flaws in end-of-life GMS 9.5.2 and earlier won't be fixed.\n\n\u2022 CVE-2026-109593: Unauthenticated file reads\n\u2022 CVE-2026-109594: Authenticated SQL injection\n\nSonicWall urges migration to NSM.\n\nRead: https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html", "url": "https://t.me/thehackernews/10571"}, {"timestamp": "2026-11-04T18:01:07.593Z", "date_only": false, "value": "2026-11-04T18:01:07.593284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzltjxod67h7", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "d09af2d2-0699-478b-907e-6019818c4d10", "content": "Developing: Critical Vulnerability (CVE-2026-109593)\nhttps://cyber.eventmonitor.net/incident/EM-20261104-6KKL/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzltjxod67h7"}, {"timestamp": "2026-11-04T18:06:19Z", "date_only": false, "value": "2026-11-04T18:06:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/11/04/sonicwall-wont-patch-eol-gms.html", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "29173c61-2d5c-4e9e-b676-0e7231cc7349", "content": "SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records\n\nSonicWall has warned of two vulnerabilities in its end-of-life Global Management System that it will not patch, The Hacker News reports. They include CVE-2026-109593, rated CVSS 9.1, an unauthenticated file-read flaw affecting GMS 9.5.2 and earlier versions.", "url": "https://threatintel.cc/2026/11/04/sonicwall-wont-patch-eol-gms.html"}, {"timestamp": "2026-11-04T18:32:40.049Z", "date_only": false, "value": "2026-11-04T18:32:40.049833Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mziyhabd772u", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "1bb6f68a-c7d2-49c9-a7e0-28216954e3c3", "content": "\ud83d\udea8 Breaking: CVE-2026-109593 \u2014 Critical 9.1\nover the network \u00b7 no login\nhttps://ax-news.com/cve/CVE-2026-109593\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mziyhabd772u"}, {"timestamp": "2026-11-04T18:41:55.632Z", "date_only": false, "value": "2026-11-04T18:41:55.632393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/5vndbml4xhmge", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "47759197-e846-4b4d-bdcd-15c46224db4a", "content": "\ud83d\udea8 CVE-2026-109593\nCVSS 9.1 / EPSS 0.52% / KEV: No\nTL;DR: An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing\u2026\nhttps://cvesentinel.com/report/CVE-2026-109593\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/5vndbml4xhmge"}, {"timestamp": "2026-11-04T19:06:37.628Z", "date_only": false, "value": "2026-11-04T19:06:37.628213Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117559734907660259", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "d07bc261-351f-4de4-a1ad-a0067ce4ee8c", "content": "SonicWall Won\u2019t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records\nSonicWall has warned of two vulnerabilities in its end-of-life Global Management System that it will not patch, The Hacker News reports. They include CVE-2026-109593, rated CVSS 9.1, an unauthenticated file-read flaw affecting GMS 9.5.2 and earlier versions. https://thehackernews.com/2026/11/sonicwall-wont-patch-eol-gms-flaws-that.html", "url": "https://infosec.exchange/users/edwardk/statuses/117559734907660259"}, {"timestamp": "2026-11-04T21:15:04Z", "date_only": false, "value": "2026-11-04T21:15:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/c2kdWbeApqinJPVih3BWnJRBAZq68Ljl3FO_bUYwD_-tQQ", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "229e3c24-3737-438e-8d8b-5be7847c1314"}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4354", "record": "WID-SEC-W-2026-4354", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4354", "record": "WID-SEC-W-2026-4354", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4354", "record": "WID-SEC-W-2026-4354", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4354", "record": "WID-SEC-W-2026-4354", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T07:33:00.013Z", "date_only": false, "value": "2026-11-05T07:33:00.013805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3mzke2ny37m25", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "0a06a0ce-e993-4353-b426-75ef300e755d", "content": "\ud83d\udee1\ufe0f The CVEs that mattered \u00b7 Wednesday 4 November\n1. CVE-2026-111497 \u00b7 Critical 9.2 \u00b7 exploited \u2014 Google Brotli\n2. CVE-2026-119977 \u00b7 High 8.1 \u00b7 exploited \u2014 WordPress Core\n3. CVE-2026-109593 \u00b7 Critical 9.1 \u2014 SonicWall Won't Patch EoL GMS Flaws That\nhttps://ax-news.com/cve\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3mzke2ny37m25"}, {"timestamp": "2026-11-05T08:48:36.127Z", "date_only": false, "value": "2026-11-05T08:48:36.127418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mzkibtu2532x", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "316a3747-c49a-4c5e-9d7e-ead50f4fb294", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 2\n\u2022 Foglight for Databases (Quest) (CVE-2026-92190), CVSS 9.8 (CERT-FR)\n\u2022 SonicWall Global Management System (GMS) (CVE-2026-109593), CVSS 9.1 (CERT-FR)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mzkibtu2532x"}, {"timestamp": "2026-11-05T11:35:00.787Z", "date_only": false, "value": "2026-11-05T11:35:00.787+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4354", "record": "WID-SEC-W-2026-4354", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T12:37:10.909Z", "date_only": false, "value": "2026-11-05T12:37:10.909233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mzkv2h4cz22m", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "4fab5823-ab94-427e-b8bb-7708ce39825b", "content": "End of life. End of patches. Same sentence, Earth. SonicWall GMS 9.5.2 and earlier: CVE-2026-109593, unauthenticated file read over the network. CVSS 9.1. Fix? Migrate to NSM, they said. Your firewall farm's babysitter is a museum exhibit with the door propped open. *burp* @bleepingcomputer.com", "url": "https://bsky.app/profile/alienrick.xyz/post/3mzkv2h4cz22m"}, {"timestamp": "2026-11-07T06:46:19.483Z", "date_only": false, "value": "2026-11-07T06:46:19.483863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mzpcezkzkj2s", "record": "CVE-2026-109593", "field": "creation_timestamp", "uuid": "6dd51d52-82eb-469a-80e7-a646e7d5f519", "content": "Security advisories 17/23\nSonicWall GMS file-read flaw will get no patch, says Italy's ACN\n\nGlobal Management System 9.5.2 and earlier is past end of support, so CVE-2026-109593 stays open.\n\n#infosec #cybersecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mzpcezkzkj2s"}], "metrics": {"as_of": "2026-11-10T15:23:47.465Z", "anchors": {"origin": {"timestamp": "2026-11-03T16:11:00Z", "date_only": false, "value": "2026-11-03T16:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-109593", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T16:11:00Z", "date_only": false, "value": "2026-11-03T16:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-109593", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 601967.46595, "hours": 167.21318498611112, "days": 6.967216041087963, "min_seconds": 601967.46595, "max_seconds": 601967.46595, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T16:11:00Z", "date_only": false, "value": "2026-11-03T16:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "CVE-2026-109593", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T15:23:47.465Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}