Vulnerability intelligence
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
CVSS Score
9.1
Critical
EPSS — Exploit Probability
0.0%
Riskier than 0% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Aug 12, 2026 · latest Aug 12, 2026
Tracked incidents
Coverage timeline
-
SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145www.securityweek.com · Aug 12, 2026