CVE-2026-66147

—

CVSS 3.1

9.4 critical

EPSS

2%p80

Published

Aug 11, 2026 (Aug 11, 2026)

Modified

Aug 28, 2026

Description

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.