What is GHSA-2x4r-qjw8-2rm8?

GHSA-2x4r-qjw8-2rm8 is a security advisory published by GitHub Security Advisories with Critical severity. An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...

Which CVE IDs does GHSA-2x4r-qjw8-2rm8 cover?

GHSA-2x4r-qjw8-2rm8 covers the following CVE IDs: CVE-2026-66147. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2x4r-qjw8-2rm8?

GHSA-2x4r-qjw8-2rm8 has a CVSS v3 base score of 9.4, published by GitHub Security Advisories.

GHSA-2x4r-qjw8-2rm8CriticalCVSS 9.4

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...

Vendor

GitHub Security Advisories

Published

August 11, 2026

Last Modified

August 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-66147 →

📋 Description

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-66147
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011
https://github.com/advisories/GHSA-2x4r-qjw8-2rm8