CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-22
Sangfor Operation and Maintenance Management System SSH Protocol Handler Remote Command Injection (CVE-2026-1324)
[Affected Scope] Sangfor Operation and Maintenance Management System up to version 3.0.12
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with elevated privileges by sending specially crafted requests
[Mitigation] Restrict external access to the vulnerable endpoint, apply firewall/WAF rules, and monitor for official vendor patches