CVE-2026-66147

SonicWall / GMS PUBLISHED

Description (CNA)

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Affected (CNA)

Vendor / product	Versions
SonicWall / GMS	affected 9.5.1 and earlier versions

CWE

CWE-94

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.