Vulnerability intelligence
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
CVSS Score
9.1
Critical
EPSS — Exploit Probability
0.7%
Riskier than 50% of all CVEs · checked 2026-09-26
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Aug 12, 2026 · latest Aug 12, 2026
Coverage timeline
-
SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145www.securityweek.com · Aug 12, 2026