CVE-2015-9059: Picocom Project Picocom

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.

Affected products

• Picocom Project Picocom: up to and including 1.8

Published 2017-05-28. Last modified 2026-06-17.