CVE-2026-18641

Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

State: Published
Severity: 6.9 Medium
Published: Aug 3, 2026
Updated: Aug 5, 2026
Reserved: Aug 3, 2026

Read the record on cve.org

Description

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
3.0	7.3 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-78 OS Command Injection
CWE-77 Command Injection

Affected Products

Product	Versions
Operation and Maintenance Security Management SystemSangfor	3.0.0Affected 3.0.1Affected 3.0.2Affected 3.0.3Affected 3.0.4Affected 3.0.5Affected 3.0.6Affected 3.0.7Affected 3.0.8Affected 3.0.9Affected 3.0.10Affected 3.0.11Affected 3.0.12Affected 3.0.13Affected

References

VDB-385562 | Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injectionvdb-entrytechnical-description
VDB-385562 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-18641 | CVE Analysis and Reportthird-party-advisory
Submit #853189 | Sangfor Operation and Maintenance Security Management System V3 3.0.13 20251211 Unauthenticated RCEthird-party-advisory
https://github.com/lkua-1/cve/issues/1exploitissue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.