CVE-2026-66145

Name of the Vulnerable Software and Affected Versions SonicWall GMS versions prior to 9.5.1 Build 9510.1044

Description An unauthenticated remote code execution issue exists that allows a remote attacker to read sensitive data and perform arbitrary file writes. This is achieved via zipslip, a technique where a specially crafted archive file is used to write files outside of the intended directory. Additionally, this issue allows for the extraction of encrypted password hashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.