CVE-2026-66154
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.
Risk Assessment
A man-in-the-middle attacker could exploit this to make unauthorized changes to data or configuration, potentially leading to system integrity compromise.
Recommendation
Update the GMS application to the latest version. Implement strong certificate validation mechanisms.
Original NVD description (English source)
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.