IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

Sangfor Technologies Co., Ltd. vulnerabilities (CVE)

CVE records published for Sangfor Technologies Co., Ltd., newest first. Follow to get an email when a new one appears.

Operation and Maintenance Security Management System 10Operation and Maintenance Management System 6零信任访问控制系统 aTrust 2Endpoint Detection and Response Platform 1Sangfor Behavior Management System (DC Management System) 1
16 results
7.3High
CVE-2026-18641

Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

Sangfor Operation and Maintenance Security Management System

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint…

2.7%EPSS
8.7High
CVE-2023-7307

Sangfor Behavior Management System XML External Entity Injection

Sangfor Technologies Co. Ltd. Sangfor Behavior Management System (DC Management System)

Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit craft…

10.0Critical
CVE-2025-34041

Sangfor Endpoint Detection and Response OS Command Injection

Sangfor Technologies Co., Ltd. Endpoint Detection and Response Platform

An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious H…

7.5%EPSS
4.3Medium
CVE-2025-52923
Sangfor aTrust

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.