CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-22
Sangfor Operation and Maintenance Security Management System Weak Password Recovery Vulnerability (CVE-2026-1325) Security Advisory
[Affected Scope] Sangfor Operation and Maintenance Security Management System up to version 3.0.12
[Impact] Unauthenticated remote attackers can bypass password reset logic, compromise administrative accounts, and gain full control over the bastion host
[Mitigation] Restrict external access to the system and block the vulnerable endpoint using web application firewalls or reverse proxy rules