CVE-2026-66154

Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 (Build 9510.1044)

Description Insufficient certificate validation exists within a privileged communication workflow. This flaw allows an attacker to perform a Man-in-the-Middle (MitM) attack—a technique where an attacker intercepts communication between two parties—under controlled network conditions to permit unauthorized changes.

Recommendations Update GMS application to a version later than 9.5.1 (Build 9510.1044).