CVE-2026-66147

This vulnerability lets someone send a specially made network message to your server and trick it into running commands of their choice. Think of it like leaving a remote “send instructions” door open without a lock—if someone reaches it, they may be able to take control of what the server does.

This matters if your business runs SonicWall GMS (specifically the GMS Dispatcher Service) at version 9.5.1 or older. Because the issue is unauthenticated, it does not require an account or a user clicking anything—an attacker only needs network reachability to the service. The real risk is primarily if the Dispatcher Service is reachable from the internet or otherwise accessible from untrusted networks.

This is RED because attackers can remotely trigger command execution without authentication, which is the kind of bug that leads to full server compromise. While there is no confirmed evidence in the provided reporting that it’s exploited in the wild, this still requires immediate containment steps because the impact (code execution) is severe.