CVE-2018-9866 - AskarLabs CVE Database

CVE-2018-9866

Vendor Sonicwall

Product Global Management System (GMS)

Weakness CWE-77

Published August 3, 2018

Last update May 5, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.

Key dates

02Disclosure timeline

August 3, 2018 CVE published

May 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-9866 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html

Related vulnerabilities

04Related CVE

CVE-2026-20095 Cisco Integrated Management Controller Command Injection Vulnerability CVE-2023-34231 Snowflake Golang Driver vulnerable to Command Injection CVE-2021-1552 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities CVE-2021-31356 Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts CVE-2021-32660 TechDocs content sanitization bypass