news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-66145

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
9.1 Critical
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Risk score
72.8
Published
2026-08-11
Status
Awaiting Analysis

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.

Weaknesses

CWE-94

Coverage 3

Advisories and references