Vulnerability intelligence
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
CVSS Score
9.4
Critical
EPSS — Exploit Probability
0.0%
Riskier than 0% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Aug 12, 2026 · latest Aug 12, 2026
Coverage timeline
-
SonicWall fixes critical RCE bug CVE-2026-66147 in GMS, Emailsecurityonline.info · Aug 12, 2026