【Vulnerability Alert】 SonicWall GMS Has 2 Major Security Vulnerabilities

• Subject: 【Vulnerability Alert】 SonicWall GMS Has 2 Major Security Vulnerabilities

• Description:
  • Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202608-00000011
  • SonicWall has issued a major security vulnerability advisory for its GMS product (CVE-2026-66145, CVSS: 9.1 and CVE-2026-66147, CVSS: 9.4). CVE-2026-66145 is an unauthenticated remote code execution vulnerability that allows remote attackers to read sensitive data and execute arbitrary file writes via Zip Slip; CVE-2026-66147 is an unauthenticated command injection vulnerability that allows remote attackers to execute remote code via specially crafted requests.
• Affected Platforms:
  • SonicWall GMS versions 9.5.1 and earlier
• Recommendations:
  • Please update SonicWall GMS to version 9.5.2 or later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11103-13b85-1.html

Computer and Communication Center
Network System Division