CVE-2025-27027: Radiflow Isap Smart Collector

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.

Affected products

• Radiflow Isap Smart Collector: from 1.20, before 3.02-1 (fixed in 3.02-1)

Published 2025-07-09. Last modified 2026-06-17.