SonicWall won't patch two flaws in end-of-life GMS 9.5.2 and earlier, including an unauthenticated file read (CVE-2026-109593); move to NSM
What to do: find any GMS consoles still running (virtual appliance or Windows install). Take them off the internet now and limit access to a management network, then plan the move to NSM. A management console can usually reach and configure every firewall it manages, so a file read that exposes credentials or config there is worth more than it looks. SonicWall bugs are frequent KEV entries (BleepingComputer counts 19), so expect this one to be scanned for.
Sources: BleepingComputer: SonicWall warns of unpatched flaws in end-of-life GMS software (Nov 4) · NVD: CVE-2026-109593