CVE-2020-3927: Changingtec Servisign

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.

Affected products

• Changingtec Servisign: up to and including 1.0.19.0617

Published 2020-02-03. Last modified 2026-06-17.