CVE-2026-15027 — Changing｜CGServiSign - OS Command Injection
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrar…
Published: 2026-09-23 · CVSS: 8.6 · CVSS 4.0
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7