CVE-2025-15509CWE-306

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage

High · published February 27, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-27T06:52Z
EPSS history
Timeline
  • 27 FEB 06:52Z
    The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage
    cvelistv5