CVE Catalog
CVE-2026-66145
CriticalCVSS 9.1Summary
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
Risk Assessment
The risk includes unauthorized access to sensitive data and the ability to write malicious files on the server, potentially leading to system compromise.
Recommendation
It is recommended to immediately update GMS to a patched version and implement file integrity monitoring and log auditing.
Original NVD description (English source)
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.