Browse all 4 CVE security advisories affecting SonicCloudOrg. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15497 | SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection — sonic-agent CWE-94 | 7.3 | High | 2026-07-12 |
| CVE-2026-15496 | SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection — sonic-agent CWE-78 | 6.3 | Medium | 2026-07-12 |
| CVE-2026-15495 | SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection — sonic-agent CWE-78 | 6.3 | Medium | 2026-07-12 |
| CVE-2026-6620 | SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversal — sonic-server CWE-22 | 6.3 | Medium | 2026-04-20 |
This page lists every published CVE security advisory associated with SonicCloudOrg. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.