Critical · 9.4 CVE-2026-66147 EUVD-2026-56941GHSA-2x4r-qjw8-2rm8

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which all…

Published Aug 11, 2026 · Updated Aug 12, 2026 · Assigned by sonicwall

Vendor: SonicWall Product: GMS Category: Network devices

Description

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Affected products

Vendor	Product	Affected	Fixed
SonicWall	GMS	9.5.1 and earlier versions	—

Advisories 1

WID-SEC-2026-2764 SonicWall GMS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 vendor-advisory