Sangfor records
18 published records for vendor sangfor.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 6
- With a fix record
- 5.6%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')5
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-426 Untrusted Search Path1
- CWE-522 Insufficiently Protected Credentials1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
18 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
58Plan | CVE-2023-30806No exploit | Sangfor Next-Gen Application Firewall PHPSESSID Command Injectionsangfor · next-gen application firewall · CWE-78 | Critical9.8 | — | 64.9% | Oct 10, 2023 |
58Plan | CVE-2023-30805No exploit | Sangfor Next-Gen Application Firewall Login Un Param Command Injectionsangfor · next-gen application firewall · CWE-78 | Critical9.8 | — | 64.9% | Oct 10, 2023 |
45Plan | CVE-2023-30803No exploit | Sangfor Next-Gen Application Firewall Authentication Bypasssangfor · next-gen application firewall · CWE-290 | Critical9.8 | — | 20.8% | Oct 10, 2023 |
39Monitor | CVE-2023-30804No exploit | Sangfor Next-Gen Application Firewall Authenticated File Disclosuresangfor · next-gen application firewall · CWE-22 | Medium6.9 | — | 38.9% | Oct 10, 2023 |
37Monitor | CVE-2025-15501No exploit | Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injectionsangfor · operation and maintenance security management system · CWE-77 | High8.9 | — | 6.9% | Jan 9, 2026 |
37Monitor | CVE-2025-15500No exploit | Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injectionsangfor · operation and maintenance management system · CWE-77 | High8.9 | — | 6.0% | Jan 9, 2026 |
31Monitor | CVE-2026-1324No exploit | Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injectionsangfor · operation and maintenance security management system · CWE-77 | High7.4 | — | 6.9% | Jan 22, 2026 |
31Monitor | CVE-2025-15499No exploit | Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injectionsangfor · operation and maintenance management system · CWE-77 | High7.4 | — | 5.7% | Jan 9, 2026 |
29Monitor | CVE-2025-5129No exploit | Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search pathsangfor · atrust · CWE-426 | High7.3 | — | 0.3% | May 24, 2025 |
24Monitor | CVE-2025-15502No exploit | Sangfor Operation and Maintenance Management System session SessionController os command injectionsangfor · operation and maintenance security management system · CWE-77 | Medium5.5 | — | 6.0% | Jan 10, 2026 |
23Monitor | CVE-2026-1412No exploit | Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injectionsangfor · operation and maintenance security management system · CWE-74 | Medium5.5 | — | 4.2% | Jan 25, 2026 |
23Monitor | CVE-2025-15503Proof of concept | Sangfor Operation and Maintenance Management System common.jsp unrestricted uploadsangfor · operation and maintenance security management system · CWE-284 | Medium5.5 | — | 2.0% | Jan 10, 2026 |
22Monitor | CVE-2026-1325No exploit | Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recoverysangfor · operation and maintenance security management system · CWE-640 | Medium5.5 | — | 0.5% | Jan 22, 2026 |
22Monitor | CVE-2022-22908No exploit | SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents osangfor · vdi client · CWE-522 | Medium5.5 | — | 0.2% | Feb 26, 2022 |
21Monitor | CVE-2023-30802No exploit | Sangfor Next-Gen Application Firewall Source Code Disclosuresangfor · next-gen application firewall · CWE-540 | Medium5.3 | — | 0.8% | Oct 10, 2023 |
10Monitor | CVE-2025-12916Proof of concept | Sangfor Operation and Maintenance Security Management System Frontend portal_login command injectionsangfor · operation and maintenance security management system · CWE-74 | Low2.1 | — | 5.0% | Nov 9, 2025 |
9Monitor | CVE-2026-1414No exploit | Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injectionsangfor · operation and maintenance security management system · CWE-74 | Low2.1 | — | 4.8% | Jan 25, 2026 |
9Monitor | CVE-2026-1413No exploit | Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injectionsangfor · operation and maintenance security management system · CWE-74 | Low2.1 | — | 3.0% | Jan 25, 2026 |
- CVE-2023-3080658Plan
Sangfor Next-Gen Application Firewall PHPSESSID Command Injection
CriticalCVSS 9.8No exploitEPSS 64%sangfor · next-gen application firewallOct 10, 2023
- CVE-2023-3080558Plan
Sangfor Next-Gen Application Firewall Login Un Param Command Injection
CriticalCVSS 9.8No exploitEPSS 64%sangfor · next-gen application firewallOct 10, 2023
- CVE-2023-3080345Plan
Sangfor Next-Gen Application Firewall Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 20%sangfor · next-gen application firewallOct 10, 2023
- CVE-2023-3080439Monitor
Sangfor Next-Gen Application Firewall Authenticated File Disclosure
MediumCVSS 6.9No exploitEPSS 38%sangfor · next-gen application firewallOct 10, 2023
- CVE-2025-1550137Monitor
Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection
HighCVSS 8.9No exploitEPSS 6%sangfor · operation and maintenance security management systemJan 9, 2026
- CVE-2025-1550037Monitor
Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection
HighCVSS 8.9No exploitEPSS 6%sangfor · operation and maintenance management systemJan 9, 2026
- CVE-2026-132431Monitor
Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection
HighCVSS 7.4No exploitEPSS 6%sangfor · operation and maintenance security management systemJan 22, 2026
- CVE-2025-1549931Monitor
Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection
HighCVSS 7.4No exploitEPSS 5%sangfor · operation and maintenance management systemJan 9, 2026
- CVE-2025-512929Monitor
Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path
HighCVSS 7.3No exploitEPSS 0%sangfor · atrustMay 24, 2025
- CVE-2025-1550224Monitor
Sangfor Operation and Maintenance Management System session SessionController os command injection
MediumCVSS 5.5No exploitEPSS 6%sangfor · operation and maintenance security management systemJan 10, 2026
- CVE-2026-141223Monitor
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection
MediumCVSS 5.5No exploitEPSS 4%sangfor · operation and maintenance security management systemJan 25, 2026
- CVE-2025-1550323Monitor
Sangfor Operation and Maintenance Management System common.jsp unrestricted upload
MediumCVSS 5.5Proof of conceptEPSS 2%sangfor · operation and maintenance security management systemJan 10, 2026
- CVE-2026-132522Monitor
Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery
MediumCVSS 5.5No exploitEPSS 0%sangfor · operation and maintenance security management systemJan 22, 2026
- CVE-2022-2290822Monitor
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents o
MediumCVSS 5.5No exploitEPSS 0%sangfor · vdi clientFeb 26, 2022
- CVE-2023-3080221Monitor
Sangfor Next-Gen Application Firewall Source Code Disclosure
MediumCVSS 5.3No exploitEPSS 0%sangfor · next-gen application firewallOct 10, 2023
- CVE-2025-1291610Monitor
Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection
LowCVSS 2.1Proof of conceptEPSS 5%sangfor · operation and maintenance security management systemNov 9, 2025
- CVE-2026-14149Monitor
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection
LowCVSS 2.1No exploitEPSS 4%sangfor · operation and maintenance security management systemJan 25, 2026
- CVE-2026-14139Monitor
Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection
LowCVSS 2.1No exploitEPSS 3%sangfor · operation and maintenance security management systemJan 25, 2026