CVE-2026-66146: SonicWall Gms

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.

Affected products

• SonicWall Gms: up to and including 9.5.1

Published 2026-08-11. Last modified 2026-08-28.