Posting Date: 2026/10/13

【Vulnerability Alert】Panoramic Software | CGServiSign - OS Command Injection

  • Subject:【Vulnerability Alert】Panoramic Software | CGServiSign - OS Command Injection


  • Description:
    • Forwarded TWCERT/CC (Taiwan Computer Emergency Response Team and Coordination Center) Security Alert TWCERTCC-200-202610-00000008
    • The Panoramic Software product CGServiSign has 1 critical security vulnerability (CVE-2026-15027, CVSS: 8.8). This is an OS Command Injection vulnerability, and an unauthenticated remote attacker can induce a victim to browse a malicious web page to inject arbitrary operating system commands and execute them on the victim's local computer.
  • Affected Platforms:
    • Linux version NHIServisign_1.0.23.1227
  • Recommended Actions:
    • Please update to Linux version NHIServisign_1.0.26.0625 (inclusive) or later
  • References:
    1. https://www.twcert.org.tw/tw/cp-132-11213-28a81-1.html

Computer and Communication Center
Network System Division