CVE-2026-66148

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.

Score

CVSS 3.1 6.3 Medium

Status

Awaiting Analysis - PSIRT@sonicwall.com

Published

2026-08-11

Last modified

2026-10-24

Weaknesses

CWE-94

Affected products

• Gms (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011