CVE-2026-66154
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.
| CWE | CWE-295 |
| Vendor | sonicwall |
| Product | gms |
| Published | Aug 11, 2026 |
| Last Updated | Aug 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for sonicwall gms
Be the first to know when new high vulnerabilities affecting sonicwall gms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / GMS
9.5.1 and earlier versions