Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/27 3:19 a.m.11 views

CVE-2026-1412

A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command...

9.8CVSS6.8AI score0.0359EPSS
Exploits1References1
NVD
NVD
added 2026/01/26 1:15 a.m.3 views

CVE-2026-1412

A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command...

9.8CVSS0.0359EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/26 1:2 a.m.35 views

CVE-2026-1412 Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection

A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command...

7.5CVSS0.0359EPSS
Exploits1References4
EUVD
EUVD
added 2026/01/26 1:2 a.m.2 views

EUVD-2026-4686

A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command...

7.5CVSS5.6AI score0.0359EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/26 1:2 a.m.1 views

CVE-2026-1412

A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/getclipimg of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command...

7.5CVSS5.6AI score0.0359EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/01/26 1:2 a.m.11 views

CVE-2026-1412

Sangfor Operation and Maintenance Security Management System (up to version 3.0.12) is affected by a command injection in the HTTP POST Request Handler, specifically the /fort/audit/get_clip_img function. Exploiting manipulation of the frame/dirno argument enables remote code execution, with the ...

9.8CVSS7.3AI score0.0359EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/26 12:0 a.m.2 views

Sangfor Operation and Maintenance Security Management System Command Injection Vulnerability

The Sangfor Operation and Maintenance Security Management System is a security management system developed by Sangfor Corporation in China. Versions of the Sangfor Operation and Maintenance Security Management System 3.0.12 and earlier had a command injection vulnerability. This vulnerability...

9.8CVSS7.1AI score0.0359EPSS
Exploits1References5
Rows per page
Query Builder