CGServiSign vulnerabilities

CVEs whose affected-version data names the CGServiSign package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15027High· 8.8

yesterday

CGServiSign developed by Changing has a OS Command Injection vulnerability

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting…

▾ TwilightChanging · CGServiSignEPSS 2.2%via NVD