CVE-2026-15027
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Sep 23, 2026
Vendor
unknown
Description
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer.