SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 10.0.36 : patch affected systems as a priority.
Data as of 12 Aug 2026, 07:41 UTC
Rated Critical by SecurityWeek
- Patch
- Available – fixed in 10.0.36
What to do
AI-suggested
SonicWall has released official patches addressing these vulnerabilities: GMS users should upgrade to version 9.5.2 or later, and Email Security appliance users should update to version 10.0.36 or later. Immediate application of these patches is strongly recommended. There is no evidence of exploitation in the wild. Users should follow SonicWall’s official security advisories for detailed update instructions.
Description
SonicWall patched eight vulnerabilities including critical remote code execution flaws in its discontinued Global Management System (GMS) platform and high-severity code injection bugs in Email Security products. The critical GMS vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data. These issues affect GMS versions 9.5.1 and earlier and were fixed in version 9.5.2. Email Security appliances were also updated to address code injection vulnerabilities that could lead to root-level command execution. SonicWall has not observed exploitation in the wild but urges immediate patching.