CVE-2026-18634

—

CVSS 3.1

8.4 high

EPSS

<1%p13

Published

Aug 11, 2026 (Aug 11, 2026)

Modified

Aug 28, 2026

Description

An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.

Weakness: CWE-502
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.