CVE-2026-66154

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.

Score

CVSS 3.1 8.3 High

Status

Awaiting Analysis - PSIRT@sonicwall.com

Published

2026-08-11

Last modified

2026-10-24

Weaknesses

CWE-295

Affected products

• Gms (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011