PT-2025-54296 · Qno Technology · Qno Technology Vpn Firewall

·

CVE-2025-15389

·

Published

2025-12-31

·

Updated

2026-01-05

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QNO Technology VPN Firewall (affected versions not specified)
Description An OS Command Injection issue exists in QNO Technology VPN Firewall, potentially allowing authenticated remote attackers to inject and execute arbitrary OS commands on the server. The issue allows for the injection of commands through an unspecified mechanism.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-15389

Affected Products

Qno Technology Vpn Firewall