SonicCloudOrg

Products

Product	CVEs	Exploited	Latest
sonic-agent	3	–	Jul 12, 2026
sonic-server	1	–	Apr 20, 2026

CVE-2026-15497 High 7.3 SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection 0.7%
CVE-2026-15496 Medium 6.3 SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection 2.0%
CVE-2026-15495 Medium 6.3 SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection 1.9%
CVE-2026-6620 Medium 6.3 SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversal 0.3%