PT-2026-70907 · Unknown · Command Line Interface

CVE-2026-66148

·

Published

2026-08-11

·

Updated

2026-08-11

CVSS v3.1

6.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions GMS Command-Line Interface (CLI) versions prior to 9.5.1 (Build 9510.1044)
Description An authenticated command injection issue exists in the GMS Virtual Appliance interface. This flaw allows a low-privileged local user to execute system commands with root privileges, leading to local privilege escalation.
Recommendations Update GMS Command-Line Interface (CLI) to a version later than 9.5.1 (Build 9510.1044).

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-66148
ZDI-26-531

Affected Products

Command Line Interface