CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,274 CVEs published, 266 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,274
Show in the list
Critical, last 7 days
266
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product sangfor:operation_and_maintenance_security_management_system. Show all products

10 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2025-12916Medium 6.3Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection
Assigned by VulDB
Nov 8, 2025
CVE-2025-15501Critical 9.8Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection
Assigned by VulDB
Jan 9, 2026
CVE-2025-15502High 7.3Sangfor Operation and Maintenance Management System session SessionController os command injection
Assigned by VulDB
Jan 10, 2026
CVE-2025-15503High 7.3Sangfor Operation and Maintenance Management System common.jsp unrestricted upload
Assigned by VulDB
Jan 10, 2026
CVE-2026-1324High 8.8Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection
Assigned by VulDB
Jan 22, 2026
CVE-2026-1325Medium 5.3Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery
Assigned by VulDB
Jan 22, 2026
CVE-2026-1412High 7.3Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection
Assigned by VulDB
Jan 25, 2026
CVE-2026-1413Medium 6.3Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection
Assigned by VulDB
Jan 25, 2026
CVE-2026-1414Medium 6.3Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection
Assigned by VulDB
Jan 25, 2026
CVE-2026-18641High 7.3Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection
Assigned by VulDB
Aug 3, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.