Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: SonicWall GMS — psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 Clear all filters
TI-2026-15269 CVE-2026-18634 · GHSA-v8fc-x528-77rr

Deserialization of untrusted data in SonicWall GMS

Priority LOW 38

An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00341 Published 2026-08-11 No fix listed CWE-502
TI-2026-47077 CVE-2026-66154 · GHSA-5h7r-wrwv-5rj5

Improper certificate validation in SonicWall GMS

Priority LOW 37

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network…

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00201 Published 2026-08-11 No fix listed CWE-295
TI-2026-47071 CVE-2026-66148 · GHSA-5x5c-7gj2-vq4p

Code injection in SonicWall GMS

Priority LOW 30

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01102 Published 2026-08-11 No fix listed CWE-94
TI-2026-47070 CVE-2026-66147 · GHSA-2x4r-qjw8-2rm8

Code injection in SonicWall GMS

Priority MEDIUM 52

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted re…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01764 Published 2026-08-11 No fix listed CWE-94
TI-2026-47069 CVE-2026-66146 · GHSA-4hvc-qq88-xc6c

Cross-site scripting in SonicWall GMS

Priority LOW 27

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2026-08-11 No fix listed CWE-79
TI-2026-47068 CVE-2026-66145 · GHSA-grvr-3pp5-mp37

Code injection in SonicWall GMS

Priority MEDIUM 48

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00664 Published 2026-08-11 No fix listed CWE-94