CVE-2026-66148CWE-94code-injection

CVE-2026-66148

Medium · published August 12, 2026

CVSS v3.1
6.3
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01102 · 65.4th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-08-12T01:17Z
References (1)
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 · [email protected]
EPSS history
Timeline
  • 11 AUG 20:10Z
    An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows…
    cvelistv5