CVE-2025-27027: A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands…

PriorityP419medium4.1CVSS 3.1

AVNACLPRHUINSCCLINAN

EPSS

0.25%

15.7th percentile

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
radiflow	isap_smart_collector	>= 1.20 < 3.02-1	3.02-1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.