AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SonicWallCVE-2026-66145

SonicWall GMS: remote code execution

SonicWall

CVE-2026-66145 · Published Aug 11, 2026 · updated Aug 28, 2026

Critical9.1
No fix yet
SonicWall advisory

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

Affected versions

PackageAffectedFixed in
GMS
Product
<= 9.5.1 and earlier versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-94

More SonicWall advisories

All SonicWall
Critical 9.4Aug 11SonicWall GMS: command injectionCVE-2026-66147no fix yetMedium 6.3Aug 11SonicWall GMS: command injectionCVE-2026-66148no fix yetHigh 7.8Aug 11SonicWall Email Security: code injectionCVE-2026-66149no fix yetHigh 7.8Aug 11SonicWall Email Security: code injectionCVE-2026-66150no fix yetHigh 8.3Aug 11SonicWall GMS: improper certificate validationCVE-2026-66154no fix yetHigh 8.4Aug 11SonicWall GMS: unsafe deserializationCVE-2026-18634no fix yet