https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1414.htmlhttps://patchthecve.com/cve/CVE-2026-1414.htmlWed, 17 Jun 2026 10:15:44 +0000MEDIUM 6.3: A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/get_Information of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead thttps://patchthecve.com/cve/CVE-2026-1413.htmlhttps://patchthecve.com/cve/CVE-2026-1413.htmlWed, 17 Jun 2026 10:15:44 +0000MEDIUM 6.3: A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of the argument port results in command injhttps://patchthecve.com/cve/CVE-2026-1412.htmlhttps://patchthecve.com/cve/CVE-2026-1412.htmlWed, 17 Jun 2026 10:15:44 +0000HIGH 7.3: A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/get_clip_img of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command injhttps://patchthecve.com/cve/CVE-2026-1325.htmlhttps://patchthecve.com/cve/CVE-2026-1325.htmlWed, 17 Jun 2026 10:15:36 +0000MEDIUM 5.3: A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function edit_pwd_mall of the file /fort/login/edit_pwd_mall. The manipulation of the argument flag results in weak password recovery. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2026-1324.htmlhttps://patchthecve.com/cve/CVE-2026-1324.htmlWed, 17 Jun 2026 10:15:36 +0000HIGH 8.8: A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os cohttps://patchthecve.com/cve/CVE-2025-15501.htmlhttps://patchthecve.com/cve/CVE-2025-15501.htmlWed, 17 Jun 2026 08:37:54 +0000CRITICAL 9.8: A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. Impacted is the function WriterHandle.getCmd of the file /isomp-protocol/protocol/getCmd. This manipulation of the argument sessionPath causes os command injection. Remote exploitation of the attack ishttps://patchthecve.com/cve/CVE-2025-12916.htmlhttps://patchthecve.com/cve/CVE-2025-12916.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_login of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. The