CVE Catalog
CVE-2026-66147
CriticalCVSS 9.4Summary
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
Risk Assessment
An attacker could execute arbitrary code on the server, potentially leading to full system compromise and data confidentiality breach.
Recommendation
Upgrade GMS to a version newer than 9.5.1 immediately and restrict access to the Dispatcher service to trusted networks only.
Original NVD description (English source)
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.