Read the docs
TI-2026-12648 Aliases CVE-2026-15027GHSA-q25p-jh2x-hv2j

Changing｜CGServiSign - OS Command Injection

Priority MEDIUM 45CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03162 88th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CHANGINGCGServiSign1.0.23.1227—No fix listedCNA
  • CGServiSign VendorCHANGING Affected 1.0.23.1227 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-15027
  2. 2026-10-03 Alias added: GHSA-q25p-jh2x-hv2j

References

Advisory 2

  • TI-2022-18452 ChangingTec MegaServiSignAdapter - Improper Input Validation CVSS 3.1CRITICAL 9.8
  • TI-2022-18448 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-02589 Changing｜IDExpert Windows Logon Agent - Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2026-02588 Changing｜IDExpert Windows Logon Agent - Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2021-15669 CHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation CVSS 3.1CRITICAL 9.8
  • TI-2020-15835 CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow CVSS 3.1CRITICAL 9.8
See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences