AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SonicWallCVE-2026-66147

SonicWall GMS: command injection

SonicWall

CVE-2026-66147 · Published Aug 11, 2026 · updated Aug 28, 2026

Critical9.4
No fix yet
SonicWall advisory

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Affected versions

PackageAffectedFixed in
GMS
Product
<= 9.5.1 and earlier versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-94

More SonicWall advisories

All SonicWall
Medium 6.3Aug 11SonicWall GMS: command injectionCVE-2026-66148no fix yetHigh 7.8Aug 11SonicWall Email Security: code injectionCVE-2026-66149no fix yetHigh 7.8Aug 11SonicWall Email Security: code injectionCVE-2026-66150no fix yetHigh 8.3Aug 11SonicWall GMS: improper certificate validationCVE-2026-66154no fix yetHigh 8.4Aug 11SonicWall GMS: unsafe deserializationCVE-2026-18634no fix yetCritical 9.1Aug 11SonicWall GMS: remote code executionCVE-2026-66145no fix yet