Vulnerability · Published Aug 11, 2026 · Assigned by sonicwall

CVE-2026-66148

Medium 6.3

In plain English

A medium-severity code injection in GMS from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)1.1%top 34.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	GMS	9.5.1 and earlier versions

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 vendor-advisory