Skip to content
Threat Feed
Subscribe

Vendor

Sangfor

1 brief RSS
high advisory

Remote Command Injection in Sangfor Operation and Maintenance Security Management System

An unauthenticated remote OS command injection vulnerability in the Sangfor Operation and Maintenance Security Management System allows attackers to execute arbitrary system commands via the /fort/portal_login endpoint.

Operation and Maintenance Security Management System cve-2026-18641 remote-code-execution command-injection sangfor
1r 2t 1c