SonicWall Won’t Patch Two Flaws in End-of-Life GMS Systems
Summary
SonicWall says it will not patch two vulnerabilities affecting end-of-life GMS 9.5.2 and earlier, and urges users to upgrade to NSM. Separately, CVE-2026-102255 is under active exploitation.
Key points
- SonicWall says two vulnerabilities affect GMS 9.5.2 and earlier versions.
- Because GMS has reached end of life, SonicWall will release no remediation or security update for the flaws.
- SonicWall urges organizations using GMS to upgrade to Network Security Manager (NSM).
- Separately, CVE-2026-102255, a critical pre-authenticated SSRF flaw, is being actively exploited.
- Previdian telemetry recorded 2,541 exploitation attempts from eight IP addresses since October 9, 2026, including 30 attempts on November 3.
Article Details
- Affected Versions
- SonicWall GMS 9.5.2 and earlier versions
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- unavailable
- Workarounds
- Upgrade to SonicWall Network Security Manager (NSM).
CVE
Vendors
Products
Countries
Singaporewith telemetry data from Previdian recording 2,541 attack attempts from eight unique IP addresses from Singapore and the U.S. since October 9, 2026. As many as 30 exploitation attempts were registered on November 3,United Statesdata from Previdian recording 2,541 attack attempts from eight unique IP addresses from Singapore and the U.S. since October 9, 2026. As many as 30 exploitation attempts were registered on November 3, 2026.