CVE-2026-66147 in GMS

Riassunto

di MITRE • 12/08/2026

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Sonicwall
• Prenotare: 24/07/2026
• Divulgazione: 12/08/2026
• Moderazione: accettato
• Voce: VDB-388604
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Finance, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-66147
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-66147
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-66147/