All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-66147
CRITICALpublished 2026-08-11 21:17 UTC · 1 day ago · modified 2026-08-12 15:18 UTC
9.4
CVSS / 10
// description
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
// weaknesses (CWE)
- CWE-94