All 3 CVE vulnerabilities found in sonic-agent, with AI-generated Chinese analysis, references, and POCs.
Vendor: SonicCloudOrg
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15497 | SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection CWE-94 | 7.3 | High | 2026-07-12 |
| CVE-2026-15496 | SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection CWE-78 | 6.3 | Medium | 2026-07-12 |
| CVE-2026-15495 | SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection CWE-78 | 6.3 | Medium | 2026-07-12 |
All 3 known CVE vulnerabilities affecting sonic-agent with full Chinese analysis, references, and POCs where available.