CVE-2018-9866: SonicWall Global Management System

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.

Affected products

• SonicWall Global Management System: up to and including 8.1

Published 2018-08-03. Last modified 2026-06-17.