Critical severity9.1NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026

CVE-2026-66145

Description

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

Affected products

SonicWall/GMSllm-fuzzy
Range: <=9.5.1 (Build 9510.1044)

Patches

Vulnerability mechanics

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000