Sangfor

8 results · Clear filters · Feed

• High 7.3
  CVE-2026-18641

  Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

  A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint…

  Sangfor Operation and Maintenance Security Management System
  Aug 3, 2026
• High 7.3
  CVE-2026-1412

  Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection

  A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/get_clip_img of the component HTTP POST Request Handler. Such manipulation of the …

  Sangfor Operation and Maintenance Security Management System
  Jan 26, 2026
• High 8.8
  CVE-2026-1324

  Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

  A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation o…

  Sangfor Operation and Maintenance Management System
  Jan 22, 2026
• High 7.3
  CVE-2025-15503 Scanner template

  Sangfor Operation and Maintenance Management System common.jsp unrestricted upload

  A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8. The impacted element is an unknown function of the file /fort/trust/version/common/common.jsp. Performing a manipulation of the argument File results in un…

  Sangfor Operation and Maintenance Management System
  Jan 10, 2026
• High 7.3
  CVE-2025-15502

  Sangfor Operation and Maintenance Management System session SessionController os command injection

  A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function SessionController of the file /isomp-protocol/protocol/session. Such manipulation of the argument Hostname leads to os comm…

  Sangfor Operation and Maintenance Management System
  Jan 10, 2026
• High 8.8
  CVE-2025-15499

  Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection

  A vulnerability has been found in Sangfor Operation and Maintenance Management System up to 3.0.8. This vulnerability affects the function uploadCN of the file VersionController.java. The manipulation of the argument filename leads to os command injection. Th…

  Sangfor Operation and Maintenance Management System
  Jan 9, 2026
• High 8.7
  CVE-2023-7307

  Sangfor Behavior Management System XML External Entity Injection

  Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit craft…

  Sangfor Sangfor Behavior Management System (DC Management System)
  Aug 27, 2025
• High 7.0
  CVE-2025-5129

  Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path

  A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required…

  Sangfor 零信任访问控制系统 aTrust
  May 24, 2025