VULNERABILITY INTELLIGENCE
CVE-2026-66147
CVSS score9.4 CRITICAL
EPSS probability1.76%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
Weakness classification
- PSIRT@sonicwall.com: CWE-94