EUVD-2026-56938
GHSA-grvr-3pp5-mp37
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Unauthenticated network-reachable extraction flaw (AV:N/AC:L/PR:N/UI:N) yielding sensitive-data read and arbitrary file write (C:H/I:H) with no availability impact (A:N).
Primary rating from Vendor (sonicwall).
CVSS VectorVendor: sonicwall
Lifecycle Timeline
4DescriptionCVE.org
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
AnalysisAI
Unauthenticated remote code execution in SonicWall Global Management System (GMS) 9.5.1 (Build 9510.1044) and earlier lets remote attackers read sensitive data and write arbitrary files through a Zip-Slip path-traversal flaw during archive extraction, which can be leveraged to plant executable content and achieve code execution. The issue was disclosed by SonicWall PSIRT (SNWLID-2026-0011) and carries a CVSS 9.1 (Critical) rating. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to a GMS 9.5.1 (Build 9510.1044) or earlier server and the ability to invoke the vulnerable archive-extraction/import path that processes attacker-supplied ZIP content; the Zip-Slip trigger is the malformed archive entry filename containing directory-traversal sequences. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are partially conflicting and worth weighing carefully. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade GMS to the fixed release published by SonicWall in advisory SNWLID-2026-0011 (https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011); an exact patched version string was not present in the provided data, so consult the advisory for the specific build and treat this as 'patch available per vendor advisory' pending confirmation of the version number. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately restrict network access to all SonicWall GMS deployments (versions 9.5.1, Build 9510.1044, and earlier) to authorized administrative subnets only, isolate affected systems from untrusted network segments, and perform a full file integrity scan of GMS installation directories. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-94 – Code Injection
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today