Sonicwall Gms vulnerabilities

• sonicwall global management system (gms) Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL... CVE-2026-109594 6.8 MediumNovember 3, 2026
• sonicwall global management system (gms) An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions... CVE-2026-109593 9.1 CriticalNovember 3, 2026
• sonicwall gms An insecure handling of serialized objects vulnerability was found in the one of the service of... CVE-2026-18634 8.4 HighAugust 11, 2026
• sonicwall gms An insufficient certificate validation in a privileged communication workflow, was identified in... CVE-2026-66154 8.3 HighAugust 11, 2026
• sonicwall gms An authenticated command injection vulnerability was identified in GMS Command-Line Interface ... CVE-2026-66148 6.3 MediumAugust 11, 2026
• sonicwall gms An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service... CVE-2026-66147 9.4 CriticalAugust 11, 2026
• sonicwall gms Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044... CVE-2026-66146 6.1 MediumAugust 11, 2026
• sonicwall gms An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510... CVE-2026-66145 9.1 CriticalAugust 11, 2026
• sonicwall gms, global management system +1 more Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability... CVE-2024-29011 7.5 HighMay 1, 2024
• sonicwall gms, global management system +1 more The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE)... CVE-2024-29010 7.1 HighMay 1, 2024
• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics CAS Web Services application use static values for authentication... CVE-2023-34137 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a... CVE-2023-34136 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated... CVE-2023-34135 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34134 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2023-34133 Public exploit EPSS 72.8% 7.5 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of password hash instead of password for authentication vulnerability in SonicWall GMS and... CVE-2023-34132 Public exploit 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and... CVE-2023-34131 5.3 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to... CVE-2023-34130 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2023-34129 EPSS 41.4% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.... CVE-2023-34128 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... CVE-2023-34127 Public exploit EPSS 85.8% 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on... CVE-2023-34126 8.8 HighJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read... CVE-2023-34125 EPSS 23.6% 6.5 MediumJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks,... CVE-2023-34124 Public exploit EPSS 50.5% 9.8 CriticalJuly 13, 2023
• sonicwall analytics, gms, global management system +2 more Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This... CVE-2023-34123 7.5 HighJuly 12, 2023
• sonicwall gms, global management system +1 more SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker... CVE-2021-20030 7.5 HighOctober 13, 2022
• sonicwall analytics, analytics on-prem, gms +1 more +3 more Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL... CVE-2022-22280 9.8 CriticalJuly 29, 2022
• sonicwall global management system (gms), global management system +1 more A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker... CVE-2021-20020 9.8 CriticalApril 10, 2021
• sonicwall gms, global management system +1 more A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This... CVE-2019-7478 9.8 CriticalDecember 30, 2019
• sonicwall global management system (gms), global management system +1 more A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access... CVE-2019-7476 8.1 HighApril 26, 2019
• sonicwall global management system (gms), global management system +1 more A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on... CVE-2018-9866 9.8 CriticalAugust 3, 2018