CVE-2026-66145

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

Score

CVSS 3.1 9.1 Critical

Status

Awaiting Analysis - PSIRT@sonicwall.com

Published

2026-08-11

Last modified

2026-10-24

Weaknesses

CWE-94

Affected products

• Gms (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011