What’s Vulnerable › Products

Sangfor Operation and Maintenance Security Management System vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Sangfor Operation and Maintenance Security Management System version is affected

Latest Sangfor Operation and Maintenance Security Management System vulnerabilities

• CVE-2026-18641 — Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection (CVSS 7.3)
• CVE-2026-1414 — Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection (CVSS 9.8)
• CVE-2026-1413 — Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection (CVSS 9.8)
• CVE-2026-1412 — Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection (CVSS 9.8)
• CVE-2026-1325 — Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery (CVSS 9.8)
• CVE-2026-1324 — Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection (CVSS 9.8)
• CVE-2025-15503 — Sangfor Operation and Maintenance Management System common.jsp unrestricted upload (CVSS 9.8)
• CVE-2025-15502 — Sangfor Operation and Maintenance Management System session SessionController os command injection (CVSS 9.8)
• CVE-2025-15501 — Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection (CVSS 9.8)
• CVE-2025-12916 — Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection (CVSS 9.8)