What is the CVSS score of CVE-2025-15559?

CVE-2025-15559 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Worktime are affected by CVE-2025-15559?

NesterSoft WorkTime contains a critical unauthenticated command injection vulnerability that allows attackers to execute arbitrary OS commands on affected servers without authentication.

How to fix or mitigate CVE-2025-15559?

Within 24 hours: Isolate WorkTime servers from production networks or disable the vulnerable API endpoint; alert all users not to download WorkTime clients from affected servers. Within 7 days: Conduct forensic analysis for signs of exploitation; review access logs and monitor for indicators of compromise. Within 30 days: Apply vendor patch immediately upon availability; perform comprehensive security assessment of affected systems.

Worktime CVE-2025-15559

CRITICAL

OS Command Injection (CWE-78)

2026-02-19 551230f0-3615-47bd-b7cc-93e92e730bbf

Command Injection Worktime

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

CVE Published

Feb 19, 2026 - 11:15 nvd

CRITICAL 9.8

DescriptionCVE.org

An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generate and download the WorkTime client from the WorkTime server is vulnerable in the “guid” parameter. This allows an attacker to execute arbitrary commands on the WorkTime server as NT Authority\SYSTEM with the highest privileges. Attackers are able to access or manipulate sensitive data and take over the whole server.