Log in Start free

Sangfor

Products

ProductCVEsExploitedLatest
Operation and Maintenance Management System6–Jan 22, 2026
Operation and Maintenance Security Management System6–Aug 3, 2026
Net-Gen Application Firewall4–Oct 10, 2023
aTrust2–Jun 22, 2025
Next-Gen Application Firewall (NGAF)1–Oct 10, 2023

Exploited and recent CVEs

  • CVE-2026-18641 High 7.3 Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection 2.7%
  • CVE-2026-1414 Medium 6.3 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection 4.8%
  • CVE-2026-1413 Medium 6.3 Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection 3.0%
  • CVE-2026-1412 High 7.3 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection 4.3%
  • CVE-2026-1325 Medium 5.3 Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery 0.6%
  • CVE-2026-1324 High 8.8 Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection 7.0%
  • CVE-2025-15503 High 7.3 Sangfor Operation and Maintenance Management System common.jsp unrestricted upload 2.0%
  • CVE-2025-15502 High 7.3 Sangfor Operation and Maintenance Management System session SessionController os command injection 6.1%
  • CVE-2025-15501 Critical 9.8 Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection 6.9%
  • CVE-2025-15500 Critical 9.8 Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection 6.1%
  • CVE-2025-15499 High 8.8 Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection 5.7%
  • CVE-2025-12916 Medium 6.3 Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection 5.1%
  • CVE-2025-52923 Medium 4.3 Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command. 0.2%
  • CVE-2025-5129 High 7.0 Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path 0.3%
  • CVE-2023-30806 Critical 9.8 Sangfor Next-Gen Application Firewall PHPSESSID Command Injection 65.0%
  • CVE-2023-30805 Critical 9.8 Sangfor Next-Gen Application Firewall Login Un Param Command Injection 65.0%
  • CVE-2023-30804 Medium 4.9 Sangfor Next-Gen Application Firewall Authenticated File Disclosure 38.9%
  • CVE-2023-30803 Critical 9.8 Sangfor Next-Gen Application Firewall Authentication Bypass 20.9%
  • CVE-2023-30802 Medium 5.3 Sangfor Next-Gen Application Firewall Source Code Disclosure 0.8%