Veille CVE

Recherche « SonicWall GMS »

6 CVE

Critique 2 Élevée 2 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SonicWall GMS » ✕
  1. CVE-2026-66154 8.3 Élevée

    SonicWall GMS

    An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.

  2. CVE-2026-66148 6.3 Moyenne

    SonicWall GMS

    An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.

  3. CVE-2026-66147 9.4 Critique

    SonicWall GMS

    An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

  4. CVE-2026-18634 8.4 Élevée

    SonicWall GMS

    An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.

  5. CVE-2026-66146 6.1 Moyenne

    SonicWall GMS

    Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.

  6. CVE-2026-66145 9.1 Critique

    SonicWall GMS

    An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.