CVE-2026-18641

HighCVSS 7.3

Published: 03/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 04/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.69%

75th percentile - higher than 75% of all known CVEs

Summary

Sangfor Operation and Maintenance Security Management System up to version 3.0.13 contains an OS command injection vulnerability in the DpLoginController function. The attack can be performed remotely and the exploit is publicly available.

Risk Assessment

An unauthenticated attacker can remotely execute arbitrary commands on the server, leading to full compromise of the security management system.

Recommendation

Apply available patches immediately or restrict access to the vulnerable endpoint. Monitor logs for exploitation attempts.

Other vulnerabilities in Sangfor Operation and Maintenance Security Management System

CVE-2025-12916Medium
A vulnerability was found in Sangfor Operation and Maintenance Security Management System version 3.0 in an unknown function of /fort/portal_login in the Frontend component. Manipulating the loginUrl argument leads to command injection. The attack can be initiated remotely and the exploit has been publicly disclosed.

Original NVD description (English source)

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS