Operation And Maintenance Security Management System

CVE-2026-1324 Jan 22, 15:16 HIGH POC This Week

Operation And Maintenance Security Management System versions up to 3.0.12. is affected by command injection (CVSS 8.8).

CVE-2026-1414 Jan 26, 03:15 LOW POC Monitor

Operation And Maintenance Security Management System versions up to 3.0.12. contains a vulnerability that allows attackers to command injection (CVSS 6.3).

CVE-2026-1413 Jan 26, 02:15 LOW Monitor

Operation And Maintenance Security Management System versions up to 3.0.12. contains a security vulnerability (CVSS 6.3).

CVE-2026-1412 Jan 26, 01:15 MEDIUM POC This Month

Operation And Maintenance Security Management System versions up to 3.0.12. contains a security vulnerability (CVSS 7.3).

CVE-2026-1325 Jan 22, 15:16 MEDIUM POC This Month

Operation And Maintenance Security Management System versions up to 3.0.12. is affected by weak password recovery mechanism for forgotten password (CVSS 5.3).

CVE-2025-15503 Jan 10, 09:15 MEDIUM POC This Month

Operation And Maintenance Security Management System versions up to 3.0.8. is affected by improper access control (CVSS 7.3).

CVE-2025-15502 Jan 10, 08:15 MEDIUM POC This Month

Operation And Maintenance Security Management System versions up to 3.0.8. is affected by command injection (CVSS 7.3).

CVE-2025-15501 Jan 09, 23:15 CRITICAL POC Act Now

Sangfor O&M Management System (through 3.0.8) has a second command injection in /isomp-protocol/protocol/getCmd, also via sessionPath. Public exploit with higher EPSS (1.2%) than the first vulnerability.

CVE-2025-12916 Nov 09, 00:15 LOW POC Monitor

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.