Description
The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vivo | SmartRemote | Versions below 5.1.2.0 | — |
High · 7.1
CVE-2025-15509
EUVD-2025-208128GHSA-qvjv-wc87-5x43
The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.
Published Feb 27, 2026 · Updated Feb 27, 2026 · Assigned by Vivo