Information Leakage Vulnerability in SmartRemote Module by Vivo
CVE-2025-15509

7.1HIGH

Key Information:

Vendor

Vivo

Status
Smartremote
Vendor
CVE Published:
27 February 2026

What is CVE-2025-15509?

The SmartRemote module from Vivo features inadequate restrictions on loading URLs, potentially resulting in information leakage. This vulnerability allows an attacker to exploit the insufficient validation mechanisms, leading to the unintended exposure of sensitive information. Users of the SmartRemote module are advised to apply necessary updates to mitigate the risks associated with this flaw.

Affected Version(s)

SmartRemote Versions below 5.1.2.0

References

https://www.vivo.com/en/support/security-advisory-detail?...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.