Skip to content
OpenAdvisories

Product · SonicCloudOrg

sonic-agent

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-15496

    SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

    A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The ma…

    SonicCloudOrg sonic-agent
  • Medium 6.3
    CVE-2026-15495

    SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection

    A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSocket Server. The manipulation of the argument path leads to os command injectio…

    SonicCloudOrg sonic-agent