Skip to content
OpenAdvisories

Vendor

Sangfor

19 known vulnerabilities.

Products

Operation and Maintenance Management System 6 Operation and Maintenance Security Management System 6 Net-Gen Application Firewall 4 零信任访问控制系统 aTrust 2 Next-Gen Application Firewall (NGAF) 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-1414

    Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection

    A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/get_Information of the component HTTP POST Request Handler. Executing a manipulation o…

    Sangfor Operation and Maintenance Security Management System
  • Medium 6.3
    CVE-2026-1413

    Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection

    A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of…

    Sangfor Operation and Maintenance Security Management System
  • Medium 5.3
    CVE-2026-1325

    Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery

    A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function edit_pwd_mall of the file /fort/login/edit_pwd_mall. The manipulation of the argument flag results in weak password rec…

    Sangfor Operation and Maintenance Security Management System
  • Medium 6.3
    CVE-2025-12916 Public exploit

    Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

    A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_login of the component Frontend. This manipulation of the argument loginUrl causes command injection. …

    Sangfor Operation and Maintenance Security Management System
  • Medium 4.3
    CVE-2025-52923

    Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.

    Sangfor 零信任访问控制系统 aTrust
  • Medium 4.9
    CVE-2023-30804 EPSS 39%

    Sangfor Next-Gen Application Firewall Authenticated File Disclosure

    The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploita…

    Sangfor Next-Gen Application Firewall (NGAF)
  • Medium 5.3
    CVE-2023-30802

    Sangfor Next-Gen Application Firewall Source Code Disclosure

    The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field.

    Sangfor Net-Gen Application Firewall