[NEW] [high] SonicWall GMS: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in SonicWall GMS to elevate privileges, execute arbitrary code including code with root rights, bypass security measures, manipulate data, disclose confidential information, and conduct cross-site scripting attacks.
CSIRTS triage
- What
- Multiple vulnerabilities enable privilege escalation, arbitrary code execution including root-level, security bypass, data manipulation, information disclosure, and cross-site scripting.
- Who is affected
- Deployments of SonicWall GMS across all affected versions.
- Urgency
- High severity with diverse attack vectors including root code execution; immediate remediation required despite no current exploitation.
- Action
- Apply patches for all six CVEs (CVE-2026-18634, CVE-2026-66145 through CVE-2026-66148, CVE-2026-66154) as soon as available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch GMS
Get an email when a new GMS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2764
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-186340.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-661450.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-661460.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2026-661471.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 62% of all EPSS-scored CVEs.
- Moderate exploitation riskCVE-2026-661481.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 65% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-661540.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-18634 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66145 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66146 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66147 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66148 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66154 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownMultiple vulnerabilities in SonicWall products (August 12, 2026)cert-fr-avis
- highCVE-2026-66154: An insufficient certificate validation in a privileged communication workflow, was identified …nvd
- mediumCVE-2026-66148: An authenticated command injection vulnerability was identified in GMS Command-Line Interface …nvd
- criticalCVE-2026-66147: An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Servic…nvd
- highCVE-2026-18634: An insecure handling of serialized objects vulnerability was found in the one of the service o…nvd
- mediumCVE-2026-66146: Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1…nvd
- criticalCVE-2026-66145: An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510…nvd
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] Linux Kernel: Multiple vulnerabilities2026-08-25
- medium[NEW] [medium] libTIFF: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Contao: Multiple Vulnerabilities2026-08-25
- medium[NEW] [medium] Django: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities2026-08-25