9.8
Critical
CVE-2018-9866 A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…
Description
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Global Management System (GMS) | Versions not published |
Other CVEs of Global Management System (GMS)
The 5 CVEs of Global Management System (GMS) →
CVE-2026-109594
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…
6.8
Medium
CVE-2026-109593
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…
9.1
Critical
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate…
Not rated
CVE-2019-7476
A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using…
Not rated