First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-27387

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
OPPO	ColorOS	15.0.2 and below

References

https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1937080145974403072https://

Timeline

Published: Jun 23, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-273888.3Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.CVE-2025-273895.1A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the ri CVE-2025-27399.8A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown p CVE-2025-273916.5Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis. All the values of the broker properties are logge CVE-2025-273927.2A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitiz CVE-2025-273937.2A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitiz CVE-2025-273947.2A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitiz CVE-2025-273956.5A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit t CVE-2025-273968.8A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit t CVE-2025-273973.8A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit u CVE-2025-273982.7A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutral CVE-2025-273995.3Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the visibility for domain

CVE-2025-27387: High severity, CVSS 7.4 | Vulnix