CVE-2015-4027: Acunetix Web Vulnerability Scanner

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.

Affected products

• Acunetix Web Vulnerability Scanner: up to and including 10

Published 2015-12-17. Last modified 2026-06-17.