18
CVEs
5
Critical
3
High
0
KEV
17
PoC
8
Unpatched C/H
0.0%
Patch Rate
9.6%
Avg EPSS
Severity Breakdown
CRITICAL
5
HIGH
3
MEDIUM
7
LOW
3
Monthly CVE Trend
Affected Products (8)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-15501 | Sangfor O&M Management System (through 3.0.8) has a second command injection in /isomp-protocol/protocol/getCmd, also via sessionPath. Public exploit with higher EPSS (1.2%) than the first vulnerability. | CRITICAL | 9.8 | 1.2% | 70 |
PoC
No patch
|
| CVE-2025-15500 | Sangfor Operation and Maintenance Management System (through 3.0.8) has OS command injection in /isomp-protocol/protocol/getHis via the sessionPath parameter. Public exploit available, vendor unresponsive. | CRITICAL | 9.8 | 0.3% | 69 |
PoC
No patch
|
| CVE-2023-30803 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 18.2% | 69 |
PoC
No patch
|
| CVE-2023-30805 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 65.8% | 69 |
PoC
No patch
|
| CVE-2023-30806 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 65.8% | 69 |
PoC
No patch
|
| CVE-2025-15499 | Operation And Maintenance Management System versions up to 3.0.8. is affected by command injection (CVSS 8.8). | HIGH | 8.8 | 0.4% | 64 |
PoC
No patch
|
| CVE-2026-1324 | Operation And Maintenance Security Management System versions up to 3.0.12. is affected by command injection (CVSS 8.8). | HIGH | 8.8 | 0.3% | 64 |
PoC
No patch
|
| CVE-2025-15503 | Operation And Maintenance Security Management System versions up to 3.0.8. is affected by improper access control (CVSS 7.3). | MEDIUM | 5.5 | 5.5% | 53 |
PoC
No patch
|
| CVE-2023-30804 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.5 | 12.8% | 52 |
PoC
No patch
|
| CVE-2025-15502 | Operation And Maintenance Security Management System versions up to 3.0.8. is affected by command injection (CVSS 7.3). | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2026-1412 | Operation And Maintenance Security Management System versions up to 3.0.12. contains a security vulnerability (CVSS 7.3). | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2022-22908 | SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2026-1325 | Operation And Maintenance Security Management System versions up to 3.0.12. is affected by weak password recovery mechanism for forgotten password (CVSS 5.3). | MEDIUM | 5.3 | 0.1% | 47 |
PoC
No patch
|
| CVE-2023-30802 | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.3 | 0.6% | 46 |
PoC
No patch
|
| CVE-2025-12916 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | LOW | 2.1 | 0.5% | 31 |
PoC
No patch
|