Skip to content
OpenAdvisories

Vendor

SonicCloudOrg

4 known vulnerabilities.

Products

sonic-agent 3 sonic-server 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-15496

    SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

    A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The ma…

    SonicCloudOrg sonic-agent
  • Medium 6.3
    CVE-2026-15495

    SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection

    A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSocket Server. The manipulation of the argument path leads to os command injectio…

    SonicCloudOrg sonic-agent
  • Medium 6.3
    CVE-2026-6620

    SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversal

    A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of the argument Type results in path traversal. The attack may b…

    SonicCloudOrg sonic-server