CVE-2025-15499

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Sangfor Operation and Maintenance Management System up to 3.0.8. This vulnerability affects the function uploadCN of the file VersionController.java. The manipulation of the argument filename leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Jan 9, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-15509.8The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .k CVE-2025-155009.8A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This issue affects some unknown processing of CVE-2025-155019.8A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. Impacted is the function WriterHandle.get CVE-2025-155029.8A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function Sess CVE-2025-155039.8A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8. The impacted element is an unknown f CVE-2025-155045.5A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the fi CVE-2025-155052.4A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function of the component Web Administration Inte CVE-2025-155063.3A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression o CVE-2025-155075.3The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec CVE-2025-155085.3The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin CVE-2025-155094.3The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.CVE-2025-15516.1IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows