IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.4Yüksek

CVE-2026-18634

SonicWall GMS Yayım: (2 ay önce)

Açıklama

An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component.

Zayıflık türü (CWE): CWE-502

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
SonicWall GMS 9.5.1 and earlier versions

Kaynaklar ve yamalar

Aynı üründe son açıklar — SonicWall

7.2Yüksek
CVE-2026-100232
SonicWall Network Security Manager (NSM)

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a re…

1.2%EPSS
8.8Yüksek
CVE-2026-96540
SonicWall Network Security Manager (NSM)

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escal…

6.1Orta
CVE-2026-102258
SonicWall SMA1000

Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and poten…

7.2Yüksek
CVE-2026-102257
SonicWall SMA1000

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution.

7.8Yüksek
CVE-2026-102256
SonicWall SMA1000

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as …

10.0Kritik
CVE-2026-102255
SonicWall SMA1000

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the applian…