Critical · 9.1 CVE-2026-66145 EUVD-2026-56938GHSA-grvr-3pp5-mp37

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remo…

Published Aug 11, 2026 · Updated Aug 12, 2026 · Assigned by sonicwall

Vendor: SonicWall Product: GMS Category: Network devices

Description

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	GMS	9.5.1 and earlier versions	—

Advisories 1

WID-SEC-2026-2764 SonicWall GMS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 vendor-advisory