```
Posting Date: 2026/08/17
【Vulnerability Alert】 SonicWall GMS Has 2 Major Security Vulnerabilities
- Subject: 【Vulnerability Alert】 SonicWall GMS Has 2 Major Security Vulnerabilities
- Description:
- Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202608-00000011
- SonicWall has issued a major security vulnerability advisory for its GMS product (CVE-2026-66145, CVSS: 9.1 and CVE-2026-66147, CVSS: 9.4). CVE-2026-66145 is an unauthenticated remote code execution vulnerability that allows remote attackers to read sensitive data and execute arbitrary file writes via Zip Slip; CVE-2026-66147 is an unauthenticated command injection vulnerability that allows remote attackers to execute remote code via specially crafted requests.
- Affected Platforms:
- SonicWall GMS versions 9.5.1 and earlier
- Recommendations:
- Please update SonicWall GMS to version 9.5.2 or later
- References:
Computer and Communication Center
Network System Division
