388 matches found
EUVD-2026-56938
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...
SonicWall GMS Security Affected By Multiple Vulnerabilities
SonicWall GMS Virtual Appliance, Windows - 9.5.1 and earlier versions are vulnerable to the following security issues.1 CVE-2026-66145 - An unauthenticated remote code execution vulnerabilityAn unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and...
SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall GMS Virtual Appliance. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2026-70907
Name of the Vulnerable Software and Affected Versions GMS Command-Line Interface CLI versions prior to 9.5.1 Build 9510.1044 Description An authenticated command injection issue exists in the GMS Virtual Appliance interface. This flaw allows a low-privileged local user to execute system commands...
PT-2026-70904
『We recently revisited those patches and found that none of the underlying root causes were fixed - every original CVE remained exploitable,』😩 SonicWall GMS - Unauthenticated RCE and Encrypted Password Hash Extraction CVE-2026-66145 https://t.co/hp0HOWboM9...
PT-2026-70910
Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 Build 9510.1044 Description Insufficient certificate validation exists within a privileged communication workflow. This flaw allows an attacker to perform a Man-in-the-Middle MitM attack—a technique wher...
PT-2026-70899
Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 Build 9510.1044 Description Insecure handling of serialized objects in a service allows a local attacker to perform unauthorized actions through the affected component. Serialization is the process of...
CVE-2026-18634: Deserialization of Untrusted Data
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 Build 9510.1044 and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affect...
CVE-2026-66148: Improper Control of Generation of Code
An authenticated command injection vulnerability was identified in GMS Command-Line Interface CLI 9.5.1 Build 9510.1044 and earlier versions which allows low-privileged local user to execute system commands with root privileges...
CVE-2026-66147: Improper Control of Generation of Code
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...
CVE-2026-66146: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...
CVE-2026-66145: Improper Control of Generation of Code
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...
PT-2026-70906
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...
CVE-2026-66154: Improper Certificate Validation
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...
PT-2026-70905
Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...
CVE-2019-7478
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...
Malicious code in tunis-kjt-gms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4a4a8619bd93532a655cf219fc92472a8040b0527247cfd7623ebd21fa4020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2018-17460
Malware in sbrugna...