All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-66154
HIGHpublished 2026-08-11 21:17 UTC · 1 day ago · modified 2026-08-12 15:18 UTC
8.3
CVSS / 10
// description
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.
// weaknesses (CWE)
- CWE-295