CVE-2026-18641

Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

View on CVE.org
Published Aug 3, 2026 CVSS 4.0 · 6.9 Medium EPSS 2.7% KEV · Not listed
Description
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

AI-generated

Technical impact

The vulnerability arises from an OS command injection flaw in the Login Endpoint's DpLoginController, allowing attackers to inject and execute arbitrary operating‑system commands when accessing the /fort/portal_login path. This is recognized as CWE‑77 and CWE‑78. When exploited remotely, an attacker can compromise confidentiality by accessing sensitive data, alter integrity by modifying configuration or files, and cause denial of service through system crashes or resource exhaustion.

Affected Systems

Affected product is Sangfor Operation and Maintenance Security Management System, versions up to 3.0.13 inclusive. The vulnerability is present in the component handling the portal_login endpoint and is limited to those releases; later versions are expected to contain fixes.

Risk and Exploitability

The CVSS base score of 6.9 denotes moderate severity, and the EPSS score of 2% indicates a low but non‑zero likelihood of exploitation. The publicly disclosed exploit demonstrates that attackers can use this vulnerability remotely via the /fort/portal_login endpoint. As the vendor has not yet released a patch, exposed systems remain at significant risk.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Sangfor Operation and Maintenance Security Management System to a version newer than 3.0.13 that includes the fix, if one is available.
  • Restrict external access to the /fort/portal_login endpoint using a firewall or network segmentation to limit exposure to trusted internal users only.
  • Implement input validation and sanitization for login parameters to prevent command injection until a vendor patch is applied.

Generated by OpenCVE AI on August 4, 2026 at 20:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal_login of the component Login Endpoint. This manipulation causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection
First Time appeared Sangfor
Sangfor operation And Maintenance Security Management System
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*
Vendors & Products Sangfor
Sangfor operation And Maintenance Security Management System
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Aug 5, 2026, 2:20 PM
Reserved
Aug 3, 2026, 10:52 AM

View source JSON

Updated
Aug 5, 2026, 2:20 PM

JSON

Status
Deferred
Published
Aug 3, 2026, 8:17 PM
Modified
Oct 23, 2026, 9:10 PM

View source JSON

No data.

Updated
Aug 4, 2026, 9:00 PM

JSON