CVE-2026-15027 [HIGH] – CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticate

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim’s local computer.