VULNERABILITY INTELLIGENCE
CVE-2026-66145
CVSS score9.1 CRITICAL
EPSS probability0.66%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
Weakness classification
- PSIRT@sonicwall.com: CWE-94