【Vulnerability Alert】Panoramic Software | CGServiSign - OS Command Injection

• Subject:【Vulnerability Alert】Panoramic Software | CGServiSign - OS Command Injection

• Description:
  • Forwarded TWCERT/CC (Taiwan Computer Emergency Response Team and Coordination Center) Security Alert TWCERTCC-200-202610-00000008
  • The Panoramic Software product CGServiSign has 1 critical security vulnerability (CVE-2026-15027, CVSS: 8.8). This is an OS Command Injection vulnerability, and an unauthenticated remote attacker can induce a victim to browse a malicious web page to inject arbitrary operating system commands and execute them on the victim's local computer.
• Affected Platforms:
  • Linux version NHIServisign_1.0.23.1227
• Recommended Actions:
  • Please update to Linux version NHIServisign_1.0.26.0625 (inclusive) or later
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11213-28a81-1.html

Computer and Communication Center
Network System Division