CVE-2026-18634CWE-502insecure-deserialization

CVE-2026-18634

High · published August 12, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-08-12T01:17Z
References (1)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 · [email protected]
EPSS history
Timeline
  • 11 AUG 20:14Z
    An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions
    cvelistv5